CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

vulnrichment•added 2023/03/01 12:0 a.m.•4 views

CVE-2023-1116 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...

5.4CVSS6.2AI score0.0051EPSS

Exploits1References2

cvelist•added 2023/03/01 12:0 a.m.•23 views

CVE-2023-1116 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...

5.4CVSS5.5AI score0.0051EPSS

Exploits1References2

cve•added 2023/03/01 12:0 a.m.•66 views

CVE-2023-1116

CVE-2023-1116 is a stored Cross-Site Scripting (XSS) vulnerability in pimcore/pimcore, affecting versions prior to 10.5.18. The root cause reported is lack of sanitization in email addresses within the email blacklist function, enabling an admin-authenticated attacker to inject and execute arbitr...

5.4CVSS5.2AI score0.0051EPSS

Exploits1References2Affected Software1