PT-2025-52212

Name of the Vulnerable Software and Affected Versions Bitrix24 versions prior to 25.100.301 Description Remote Code Execution is possible because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. The supplier...

📄 1C-Bitrix 25.100.500 Remote Code Execution

1C-Bitrix versions 25.100.500 and below have a vulnerability that is located within the Translate Module, which allows users to upload and extract archive files into a temporary directory. However, the application fails to properly verify the contents of these archives before extracting them. Thi...

CVE-2025-62152

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through = 269.2...

GHSA-HFMG-G39C-5444 pimcore is vulnerable to cross-site scripting in translate module

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.20 or apply this patch manually...

pimcore is vulnerable to cross-site scripting in translate module

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.20 or apply this patch manually...

GHSA-RP78-4562-GX3C Duplicate Advisory: pimcore is vulnerable to cross-site scripting in translate module

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hfmg-g39c-5444. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.20...