p PatchFirst

CVE-2024-11954

CVE-2024-11954 · Pimcore Search Document cross site scripting

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS 5.1 · Medium · EPSS 1.1% · Public exploit · Fix available

Published
Updated

Stack: php

Affected products and versions

  • pimcore

    Versions
    • 11.4.2: Affected

    No fix published

  • pimcore/pimcore Packagist

    Versions
    • v11.4.2
    • v11.4.3
    • v11.4.4
    • v11.5.0
    • v11.5.0-RC1
    • v11.5.0-RC2
    • v11.5.1
    • v11.5.2
    Affected ranges
    • ECOSYSTEM: ≥ 11.4.2, < 11.5.3

    Update to 11.5.3

Original sources

Check your server →