Cross-Site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in class.js, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting.The vulnerability exists due to the lack of sanitization in class.js allowing an attacker to inject and execute malicious javascript...

Remote Code Execution (RCE)

pixl-class is vulnerable to remote code execution RCE. The attack is possible because it uses eval function in class.js, allowing an attacker to inject malicious script and to get executed...