CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Vulnrichment•added 2023/03/09 12:0 a.m.•5 views

CVE-2023-1286 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.19...

4.8CVSS4.9AI score0.00428EPSS

Exploits1References2

Cvelist•added 2023/03/09 12:0 a.m.•24 views

CVE-2023-1286 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.19...

4.8CVSS5.2AI score0.00428EPSS

Exploits1References2

CVE•added 2023/03/09 12:0 a.m.•77 views

CVE-2023-1286

Pimcore Pimcore prior to 10.5.19 contains a Stored Cross-site Scripting (XSS) vulnerability. The issue stems from insufficient sanitization (notably in pdf_preview.js per Veracode) which can allow an admin-authenticated attacker to inject and execute arbitrary JavaScript in the browser via the au...

4.8CVSS4.8AI score0.00428EPSS

Exploits1References2Affected Software1