5 matches found
CVE-2022-0256
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
5.4CVSS6.7AI score0.00642EPSS
SaveExploits1References1
CVE-2022-0256
creationtimestamp| type| source ---|---|--- 2022-01-17 18:24:00+00:00| seen| https://t.me/cibsecurity/35674...
5.4CVSS5.3AI score0.00642EPSS
SaveExploits1References1
CVE-2022-0256
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
5.4CVSS0.00642EPSS
SaveExploits1References2
CVE-2022-0256
CVE-2022-0256 affects pimcore/pimcore with a stored XSS in the web interface. The issue arises from Improper Neutralization of Input During Web Page Generation, specifically in the getReportConfigAction of CustomReportController.php, enabling an attacker to steal cookies and gain access per Verac...
5.4CVSS5.2AI score0.00642EPSS
SaveExploits1References2Affected Software1
20