CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Cvelist•added 2023/03/09 12:00 a.m.•33 views

CVE-2023-1286 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.19...

4.8CVSS5.2AI score0.00428EPSS

SaveExploits1References2

Vulnrichment•added 2023/03/09 12:00 a.m.•9 views

CVE-2023-1286 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.19...

4.8CVSS4.9AI score0.00428EPSS

SaveExploits1References2

OSV•added 2023/03/09 12:00 a.m.•29 views

CVE-2023-1286 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.19...

4.8CVSS5.1AI score

SaveExploits0References4

CVE•added 2023/03/09 12:00 a.m.•104 views

CVE-2023-1286

Pimcore Pimcore prior to 10.5.19 contains a Stored Cross-site Scripting (XSS) vulnerability. The issue stems from insufficient sanitization (notably in pdf_preview.js per Veracode) which can allow an admin-authenticated attacker to inject and execute arbitrary JavaScript in the browser via the au...

4.8CVSS5.5AI score0.00428EPSS

SaveExploits1References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by