Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-site Scripting. The vulnerability exists due to a lack of sanitization of user inputs in datetime.js which allows an attacker to inject and execute arbitrary javascript into the browser...