Pimcore vulnerabilities
151 CVEs and advisories name Pimcore as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-1702Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-1701Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-28438Pimcore vulnerable to improper quoting of filters in Custom Reports
- CVE-2023-1578 SQL Injection in pimcore/pimcore
- CVE-2023-28429Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
- CVE-2023-1517Cross-site Scripting (XSS) - DOM in pimcore/pimcore
- CVE-2023-1515Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-28108Pimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
- CVE-2023-28106Pimcore vulnerable to Cross-site Scripting in UrlSlug Data type
- CVE-2023-1429Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-1312Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-1286Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1117Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1116Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1115Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1067Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-0827Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-23937Missing file upload type validation in pimcore/pimcore
- CVE-2023-0323Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-39365RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
- CVE-2022-3255Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2022-3211Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-2796Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-31092SQL injection in pimcore
- CVE-2022-1429SQL injection in GridHelperService.php in pimcore/pimcore
- CVE-2022-1351Stored XSS in Tooltip in pimcore/pimcore
- CVE-2022-1339SQL injection in ElementController.php in pimcore/pimcore
- CVE-2022-1219SQL injection in RecyclebinController.php in pimcore/pimcore
- CVE-2022-0955Cross-site Scripting (XSS) - Stored in pimcore/data-hub
- CVE-2022-0705Cross-site Scripting (XSS) - Stored in pimcore/pimcore