Security Advisories - pimcore/pimcore - Packagist

pimcore/pimcore Security Advisories for v10.3.5 (7)

Pimcore vulnerable to cross site scripting

CVE-2022-3255

Affected version: <=10.5.6

Reported by:
GitHub
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users

CVE-2022-3211

Affected version: <10.5.6

Reported by:
GitHub
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore

CVE-2022-31092

Affected version: <10.4.4

Reported by:
GitHub
SQL Injection found in Pimcore

CVE-2022-1429

Affected version: <10.3.6

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-1351

Affected version: <10.4

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0894

Affected version: <10.4.0

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0893

Affected version: <10.4.0

Reported by:
GitHub