medium5.4
CVE-2026-5362
An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution wh…
Impact
An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the published page is rendered. This issue affects pimcore: v12.3.3.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | pimcore/pimcore | = 12.3.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pimcore | Pimcore | Version 12.3.3 |