PT-2019-15739

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 6.3.0 Description The issue allows script execution in the Email Log preview window due to the lack of a Content-Security-Policy header in the bundles/AdminBundle/Controller/Admin/EmailController.php file...