Show filters
118 Total Results
Displaying 51-60 of 118
Sort by:
Attacker Value
Unknown

CVE-2023-28106

Disclosure Date: March 16, 2023 (last updated October 08, 2023)
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
Attacker Value
Unknown

CVE-2023-1429

Disclosure Date: March 16, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
Attacker Value
Unknown

CVE-2023-1312

Disclosure Date: March 10, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
Attacker Value
Unknown

CVE-2023-1286

Disclosure Date: March 09, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
Attacker Value
Unknown

CVE-2023-1117

Disclosure Date: March 01, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
Attacker Value
Unknown

CVE-2023-1116

Disclosure Date: March 01, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
Attacker Value
Unknown

CVE-2023-1115

Disclosure Date: March 01, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
Attacker Value
Unknown

CVE-2023-1067

Disclosure Date: February 27, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
Attacker Value
Unknown

CVE-2023-0827

Disclosure Date: February 14, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.
Attacker Value
Unknown

CVE-2023-25240

Disclosure Date: February 13, 2023 (last updated October 08, 2023)
An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.