CVE-2026-23959

CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was identified in versions prior to 4.1.9 in the "CustomerTransformerController" within the CoreShop admin panel. The affected endpoint improperly interpolates user-supplied input into a SQL query, leadi...

CVE-2026-23959: SQL Injection: Hibernate

CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was identified in versions prior to 4.1.9 in the CustomerTransformerController within the CoreShop admin panel. The affected endpoint improperly interpolates user-supplied input into a SQL query, leading...