GHSA-xmq3-hgjx-6997
Cross-site Scripting in Pimcore
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.4.0 | 10.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Pimcore 10.3.3 and prior is vulnerable to stored cross-site scripting. A patch is available on the 10.x branch and will likely be part of version 10.4.0.
References
External links from the advisory. They lead to third-party sites.