medium6.1
CVE-2021-4081
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Impact
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pimcore | Pimcore | before 10.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a
- https://huntr.dev/bounties/da173e66-76ba-4f98-b8fb-429aabf222d3
- https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a
- https://huntr.dev/bounties/da173e66-76ba-4f98-b8fb-429aabf222d3