medium4.8
CVE-2023-1312
pimcore is vulnerable to cross-site scripting
Impact
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | pimcore/pimcore | < 10.5.19 | 10.5.19 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pimcore | Pimcore | before 10.5.19 |