4 matches found
CVE-2023-2322 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...
5.2CVSS5.5AI score0.00563EPSS
SaveExploits1References2
CVE-2023-2322 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...
5.2CVSS5.5AI score
SaveExploits0References4
CVE-2023-2322
CVE-2023-2322 is a stored XSS in pimcore/pimcore prior to 10.5.21. The issue stems from insufficient sanitization/escaping in user-provided data (notably in the Properties parameter and related getLinkContent path per Veracode) which can allow injection and execution of arbitrary scripts. Affecte...
5.4CVSS5.1AI score0.00563EPSS
SaveExploits1References2Affected Software1
20