SQL Injection

Overview pimcore/pimcore is a content & product management framework CMS/PIM/E-Commerce. Affected versions of this package are vulnerable to SQL Injection via the getRelationFilterCondition method. Remediation Upgrade pimcore/pimcore to version 11.5.4 or higher. References - GitHub Commit -...

CVE-2022-0348

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2...

CVE-2022-0285

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

CVE-2022-0262

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.7...

CVE-2022-0263

Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7...