pimcore/pimcore

10.2.8

SEMANTIC 3 CVEs

unspecified

OTHER 75 CVEs

CVE-2022-2796

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4.

MEDIUM Aug 23, 2022

CVE-2022-1429

SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data

HIGH Apr 22, 2022

CVE-2022-1351

Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.

MEDIUM Apr 14, 2022

CVE-2022-1339

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

HIGH Apr 13, 2022

CVE-2022-1219

SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

HIGH Apr 08, 2022

CVE-2021-4146

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.

MEDIUM Jan 18, 2022

CVE-2021-4139

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

MEDIUM Dec 21, 2021

CVE-2021-4084

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

HIGH Dec 10, 2021

CVE-2021-4081

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

MEDIUM Dec 10, 2021

CVE-2021-4082

pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

MEDIUM Dec 10, 2021