Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 138
Reset filtersPimcore Cross-site Scripting vulnerability
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Pimcore vulnerable to SQL Injection in Dataobjects sorting
Pimcore Cross-site Scripting vulnerability
Pimcore Cross-site Scripting vulnerability
Pimcore SQL Injection vulnerability
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
Pimcore Privilege Defined With Unsafe Actions vulnerability
Pimcore Cross-site Scripting vulnerability
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Cross-site Scripting (XSS) in pimcore
Arbitrary File Read in Admin JS CSS files
Cross-site Scripting (XSS) in DataObject columns grid
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Path Traversal in Asset "import from server" option
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.