Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization of the Title field in the setting.js file which allows an attacker to inject and execute malicious javascript...