CVE-2022-0285

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.

Score

CVSS 3.0 6.6 Medium

Status

Modified - security@huntr.dev

Published

2022-01-20

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Pimcore (Pimcore)
• Pimcorepimcore (Pimcore)

References

• https://github.com/pimcore/pimcore/commit/b432225952e2a5ab0268f401b85a14480369b835
• https://huntr.dev/bounties/321918b2-aa01-410e-9f7c-dca5f286bc9c