PT-2023-16767 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.18 Description: The issue is related to Cross-site Scripting XSS - Stored, which can be used by an attacker to send a malicious script to any user through the Image/Video thumbnail config. Recommendation...