Cross-Site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization in the GDPR export email address input, which allows an attacker to inject and execute arbitrary JavaScript into the system...