CVE Feed

    Dashboard / CVE / CVE-2023-1702

    CVE-2023-1702

    Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

    Published:Mar 29, 2023
    Last Modified:Feb 12, 2025
    EPS:Mar 29, 2023
    EPSS Score:0.00002
    CVSS Score:5.4

    Affected Products

    Vendor
    Pimcore
    Product
    Pimcore

    Exploits

    https://huntr.dev/bounties/d8a47f29-3297-4fce-b534-e1d95a2b3e19https://huntr.dev/bounties/d8a47f29-3297-4fce-b534-e1d95a2b3e19

    Related CVEs

    CVE-2026-55634 (CVSS 9.9) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the …
    CVE-2026-55220 (CVSS 9.3) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimc…
    CVE-2026-44741 (CVSS 8.8) — Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQ…
    CVE-2026-45704 (CVSS 7.1) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomRepo…
    CVE-2026-44739 (CVSS 8.7) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the column…
    CVE-2026-45260 (CVSS 8.1) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, Pimcore's …
    CVE-2026-45703 (CVSS 6.4) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordEx…
    CVE-2026-45162 (CVSS 8) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple P…
    CVE-2026-55207 (CVSS 8.8) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenti…
    CVE-2026-55208 (CVSS 7.7) — Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an aut…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High