← Back

Pimcore

pimcore

Vendor: Pimcore • 127 CVEs

CVEs (127)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Pimcore
1Pimcore
Jun 17, 2026
Mar 15, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
1Pimcore
1Pimcore
Jun 17, 2026
Mar 15, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
1Pimcore
1Pimcore
Jun 17, 2026
Mar 4, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
1Pimcore
1Pimcore
Jun 17, 2026
Mar 4, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
1Pimcore
1Pimcore
Jun 17, 2026
Feb 22, 2022
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.
1Pimcore
1Pimcore
Jun 17, 2026
Feb 14, 2022
N/A· v4
6.4 MEDIUM· v3
5.0 MEDIUM· v2
Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.
1Pimcore
1Pimcore
Jun 17, 2026
Feb 8, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.
1Pimcore
1Pimcore
Jun 17, 2026
Feb 8, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 26, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 18, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 18, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 18, 2022
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 18, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.
1Pimcore
1Pimcore
Jun 17, 2026
Jan 17, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
1Pimcore
1Pimcore
Jun 17, 2026
Jan 17, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Pimcore
1Pimcore
Jun 17, 2026
Jan 17, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Pimcore
1Pimcore
Jun 17, 2026
Dec 21, 2021
N/A· v4
9.0 CRITICAL· v3
6.0 MEDIUM· v2
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Pimcore
1Pimcore
Jun 17, 2026
Dec 10, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')