CVE-2019-18656

Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-10-31

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Pimcore (Pimcore)

References

• https://github.com/pimcore/pimcore/commit/ca036e9f86bb5cdb3dac0930ec131e5f35e26c5f