CVE-2023-28106 — Pimcore vulnerable to Cross-site Scripting in UrlSlug Data type
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecti…
Published: 2023-03-16 · CVSS: 6.1 · CVSS 3.1
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7