Cross-site Scripting in pimcore

pimcore is vulnerable to Stored XSS at Name field in the setting tab of the Global Targeting Rules...

GHSA-455W-GV5P-WGG3 Cross-site Scripting in pimcore

pimcore is vulnerable to Stored XSS at Name field in the setting tab of the Global Targeting Rules...

PT-2022-13077

Name of the Vulnerable Software and Affected Versions pimcore versions prior to 10.2.7 Description The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository pimcore/pimcore. This type of attack involves storing malicious scripts on a website, which are then...

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Description pimcore is vulnerable to Stored XSS at Name field in the setting tab of the Global Targeting Rules. Steps to reproduce 1.Go to https://demo.pimcore.fun/admin/ and login. 2.In the left menu bar, click the Marketing icon then choose Personalization / Targeting - Global Targeting Rules...