CVE-2023-1704

Name of the Vulnerable Software and Affected Versions pimcore/pimcore versions prior to 10.5.20

Description The issue is related to Cross-site Scripting (XSS) - Stored, which can potentially allow stealing a user's cookie and gaining unauthorized access to the user's account. This could also redirect users to malicious sites.

Recommendations Update to version 10.5.20 or apply the patch manually from https://github.com/pimcore/pimcore/pull/14732.patch As a temporary workaround, consider applying the patch from https://github.com/pimcore/pimcore/pull/14732.patch manually to minimize the risk of exploitation.