CVE-2023-28106

Published: 2023-03-16T17:15Z

Last Modified: 2024-11-21T07:54Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt