CVE-2021-4139

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4139

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4139 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4139

CVE-2021-4139 is a Cross-site Scripting (stored XSS) vulnerability in pimcore/pimcore, caused by improper neutralization of input during web page generation. Connected documents indicate affected component is the pimcore Classification Store/page rendering, with exploitation demonstrated in publi...