Description

Cross site scripting vulnerability in pimcore/pimcore in HTML-Tags of “SEO & Settings”

Proof of Concept

1. Login in stable account URL : https://demo.pimcore.fun/admin/?_dc=1675166039&perspective=
2. Go to Home ---> SEO & Settings 
3. Enter Payload in HTML-Tags 

For More Understanding please check POC :  https://drive.google.com/file/d/18_sFHJXEZyubEZ3MO6KK1oBtDZ_BuXpR/view?usp=sharing