3 matches found
Incorrect Authorization
Overview pimcore/pimcore is a content & product management framework CMS/PIM/E-Commerce. Affected versions of this package are vulnerable to Incorrect Authorization in the WordExport process. An attacker can access and export sensitive document content by exploiting insufficient object-level...
Deserialization of Untrusted Data
Overview pimcore/pimcore is a content & product management framework CMS/PIM/E-Commerce. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the unserialize process. An attacker can achieve arbitrary code execution by injecting malicious serialized PHP objects...
PT-2024-26383 · Umbraco · Umbraco Cms
Name of the Vulnerable Software and Affected Versions: Umbraco CMS versions prior to 8.18.13 Umbraco CMS versions prior to 10.8.4 Umbraco CMS versions prior to 12.3.7 Umbraco CMS versions prior to 13.1.1 Description: The issue is a stored Cross-site scripting XSS vulnerability that allows attacke...