3 matches found
CVE-2023-4145
Cross-site Scripting XSS - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2...
6.5CVSS5.9AI score0.00612EPSS
SaveExploits1References1
CVE-2023-4145
CVE-2023-4145 is a stored XSS vulnerability in pimcore/customer-data-framework present in versions prior to 3.4.2. The issue stems from cross-site scripting in the Customer Data Framework that could be triggered via HTML injection in emails, potentially allowing an attacker to influence a victim’...
6.5CVSS5.3AI score0.00612EPSS
SaveExploits1References2Affected Software1
20