Medium
CVE-2023-1312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 138
Reset filters
Medium
CVE-2023-1286
Cross-site Scripting (XSS) in pimcore/pimcore
Medium
CVE-2023-1116
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Medium
CVE-2023-1117
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Medium
CVE-2023-1115
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
Medium
CVE-2023-1067
Pimcore vulnerable to Cross-site Scripting
Medium
ghsa-76r7-h46w-463r
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
Medium
CVE-2023-0827
Cross-site Scripting in pimcore
High
CVE-2023-25240
SameSite Attribute vulnerability in pimCore
Medium
CVE-2023-23937
Pimcore contains Unrestricted Upload of File with Dangerous Type
Medium
CVE-2023-0323
pimcore is vulnerable to cross-site scripting via "title field " in data objects
Critical
CVE-2022-39365
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Medium
CVE-2022-3255
Pimcore vulnerable to cross site scripting
Medium
CVE-2022-3211
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
Medium
CVE-2022-2796
Pimcore Cross-site Scripting (XSS)
High
CVE-2022-31092
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Medium
CVE-2019-18982
Pimcore Cross-site Scripting (XSS) vulnerability
Critical
CVE-2019-18985
Pimcore 2FA Vulnerable to Brute Forcing
Critical
CVE-2019-18981
Pimcore Access Control Issues
High
CVE-2019-18986
Pimcore Discloses Usernames In Use
Medium
CVE-2019-18656
Pimcore XSS Vulnerability
High
CVE-2019-16317
Pimcore RCE via PHAR upload
High
CVE-2019-16318
Pimcore Unrestricted Upload of File with Dangerous Type
High
CVE-2014-2921
Pimcore Vulnerable to PHP Object Injection Attacks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.