Multiple Cross-Site Scripting (XSS) Vulnerabilities in Pimcore

CVE-2018-14059 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

Learn more about our User Device Pen Test.