CVE-2019-18656

Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements...

CVE-2019-18656

creationtimestamp| type| source ---|---|--- 2024-02-01 10:41:55+00:00| seen| https://t.me/ctinow/177458...

CVE-2019-18656

Pimcore 6.2.3 is vulnerable to Cross-Site Scripting (XSS) in the translations grid. The root cause is a mishandling of certain HTML elements in bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js. The vulnerability is documented across multiple sources (NVD, Red Hat, GHSA/osv...