Lucene search
Veracode Vulnerability DatabaseVERACODE:21974HistoryNov 18, 2019 - 5:21 a.m.
Cross-Site Scripting (XSS)
2019-11-1805:21:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
33.0%
pimcore/pimcore is vulnerable to cross-site scripting (XSS). The showEmailLogAction function in bundles/AdminBundle/Controller/Admin/EmailController.php allows script execution in the Email Log preview window due to the lack of a Content-Security-Policy header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pimcore/pimcore | le | 6.2.3 |
Related
prion
prion
Code injection
2019-11-15 05:15:00
nvd
nvd
CVE-2019-18982
2019-11-15 05:15:12
cvelist
cvelist
CVE-2019-18982
2019-11-15 04:22:34
osv
osv
Pimcore Cross-site Scripting (XSS) vulnerability
2022-05-24 17:01:23
CVE-2019-18982
2019-11-15 05:15:12
cve
cve
CVE-2019-18982
2019-11-15 05:15:12
github
github
Pimcore Cross-site Scripting (XSS) vulnerability
2022-05-24 17:01:23