EPSS
Percentile
68.4%
pimcore/pimcore is vulnereable to cross-site scripting (XSS) attacks. The library does not sanitize the text fields in multiple pop-up dialogs, allowing a malicious user to inject and execute arbitrary Javascript.
github.com/pimcore/pimcore/commit/3e4f6888a581705bd395b387de70ecd7252e3a68
www.sec-consult.com/en/blog/advisories/sql-injection-xss-csrf-vulnerabilities-in-pimcore-software/