pimcore cross-site scripting vulnerability (CNVD-2023-43240)

pimcore an open source data and experience management platform. A cross-site scripting vulnerability exists in versions of Pimcore prior to 10.5.21, which can be exploited by attackers to inject malicious JavaScript scripts...