CVE-2023-28106
on github
Published
Severity
CVSS v3:
4.8 MEDIUM
CVSS v2:
N/A
Description
Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
References
Configurations
CPE23 | Version Start | Version End | Exact Version |
---|---|---|---|
cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:* | n/a | 10.5.19 | * |