Vulnerability CVE-2023-1429


Published: 2023-03-16

Description:
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f
https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5

Copyright 2024, cxsecurity.com

 

Back to Top