CVE-2023-5873

    Dashboard / Vulnerabilities / CVE-2023-5873

    CVE-2023-5873

    Published: 31 Oct 2023Last Modified: 28 Oct 2026

    Summary: Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Details: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.

    References: https://huntr.com/bounties/701cfc30-22a1-4c4b-9b2f-885c77c290ce, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5873.json, https://nvd.nist.gov/vuln/detail/CVE-2023-5873, https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c219fe9566e3787a7e4c835ce21f4916fb3b1625

    Affected versions

    v11.0.0
    v11.0.0-RC2
    v11.0.0-RC1
    v11.0.0-BETA1
    v11.0.0-ALPHA8
    v11.0.0-ALPHA7
    v11.0.0-ALPHA6
    v11.0.0-ALPHA5
    v11.0.0-ALPHA4
    v11.0.0-ALPHA3
    v11.0.0-ALPHA2
    v11.0.0-ALPHA1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-5873 | CVE-DB