4 matches found
CVE-2023-1116 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
5.4CVSS5.5AI score0.0051EPSS
SaveExploits1References2
CVE-2023-1116 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
5.4CVSS6.2AI score0.0051EPSS
SaveExploits1References2
CVE-2023-1116
CVE-2023-1116 is a stored Cross-Site Scripting (XSS) vulnerability in pimcore/pimcore, affecting versions prior to 10.5.18. The root cause reported is lack of sanitization in email addresses within the email blacklist function, enabling an admin-authenticated attacker to inject and execute arbitr...
5.4CVSS5.2AI score0.0051EPSS
SaveExploits1References2Affected Software1
20