Cross-Site Scripting (XSS)

2022-09-2606:54:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

pimcore

cross-site scripting

user roles

vulnerability

escaped

injection

payload

documents

assets

data objects

EPSS

0.001

Percentile

21.4%

JSON

pimcore is vulnerable to cross-site scripting. The vulnerability exists in User/Roles because the path column in Users’ Workspaces is not properly escaped allowing an attacker to inject and execute payload xss at documents, assets and data objects.