Threats tagged 'ghsa-xr3m-6gq6-22cg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 1.1%	CVE-2024-11954pimcore/pimcore · Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document High8.1EPSS 1.1%2025-01-28GCVE DatabaseCVE-2024-11954 Pimcore versions from 11.4.2 up to but not including 11.5.3 contain a stored Cross-Site Scripting (XSS) vulnerability in the PDF upload functionality. This flaw allows authenticated users to upload malicious PDFs that execute arbitrary scripts when viewed, potentially leading to session hijacking, web page defacement, or unauthorized access to sensitive data. The vulnerability is fixed in version 11.5.3. EPSS 1.1%Vulnerability CWE-79 #ghsa-xr3m-6gq6-22cg #packagist	GCVE Database	2025-01-28

Page 1 of 1