Executive brief
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Affected products
- Packagist pimcore/admin-ui-classic-bundle
Junglewise Threat Intelligence
CVE-2023-46722: Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
CVE-2023-46722 · Severity: low · CVSS 3.1 · Published 2023-11-01
Technologies: pimcore/admin-ui-classic-bundle (Packagist). Vendors: Packagist.
Related threats
- Pimcore Admin Classic Bundle SQL injection in translation grid date filter
- Pimcore's Admin Classic Bundle allows HTML Injection
- Pimcore Admin Classic Bundle allows user enumeration
- Pimcore vulnerable to disclosure of system and database information behind /admin firewall
- Vulnerable embedded jQuery Version