Total 155 security vulnerabilities recorded for pimcore software and firmware.
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20....
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20....
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20....
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20....
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write a...
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19....
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19....
Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class defin...
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19....
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is ...
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malici...
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19....
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17....
An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code....
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. The upload functionality for updating...
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14....
Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/M...
If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things...