Lucene search
+L

3 matches found

OSV
OSV
added 2023/03/20 5:18 p.m.25 views

GHSA-42X8-2V53-PQMJ Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.19 or apply this patch manually...

4.8CVSS4.6AI score0.00402EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2023/03/20 5:18 p.m.27 views

Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.19 or apply this patch manually...

4.8CVSS5.5AI score0.00402EPSS
SaveExploits1References8Affected Software1
Huntr
Huntr
added 2023/03/08 4:55 p.m.20 views

XSS in Schedule tab of Documents

Description pimcore is vulnerable to XSS at Time field in Schedule tab of Document. Payload " Proof of Concept 1.Go to https://demo.pimcore.fun/admin/ and login. 2.In Documents, go to home - click on Schedule icon to go to this tab. 3.In the Schedule tab, input the payload " into the Time field a...

4.3CVSS5.1AI score0.00402EPSS
SaveExploits1
Rows per page
Query Builder