| Package | Affected versions | Patched versions |
|---|---|---|
| pimcore/pimcore | < 5.3.0 | 5.3.0 |
| pimcore | ≤ 5.2.3 |
Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free