Cross-site Scripting (XSS)

2023-03-1612:15:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

pimcore

html validation

javascript injection

browser

JSON

pimcore/pimcore is vulnerable to Cross-site Scripting (XSS). The vulnerability exists due to the SEO and Settings feature because it does not properly validate the HTML tags, which allows attackers to inject and execute malicious JavaScript into the browser.