Описание
Cross-site Scripting in Pimcore Datahub
Pimcore Datahub prior to 1.2.4 is vulnerable to stored cross-site scripting. An admin user accessing Datahub triggers the attack, which may result in the user's cookie being stolen.
Пакеты
Наименование
pimcore/data-hub
composer
Затронутые версииВерсия исправления
< 1.2.4
1.2.4
Связанные уязвимости
CVSS3: 4.8
nvd
почти 4 года назад
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.