CVE-2022-0256

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-0256

creationtimestamp| type| source ---|---|--- 2022-01-17 18:24:00+00:00| seen| https://t.me/cibsecurity/35674...

CVE-2022-0256

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-0256 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-0256

CVE-2022-0256 affects pimcore/pimcore with a stored XSS in the web interface. The issue arises from Improper Neutralization of Input During Web Page Generation, specifically in the getReportConfigAction of CustomReportController.php, enabling an attacker to steal cookies and gain access per Verac...