CVE-2019-18656: XSS
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
Other sources
Pimcore 6prior to 6.3.0 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18656?
CVE-2019-18656 is classified as a Cross-Site Scripting (XSS) vulnerability with potentially high impact on affected systems.
How do I fix CVE-2019-18656?
To fix CVE-2019-18656, upgrade Pimcore to version 6.3.0 or later.
Which versions of Pimcore are affected by CVE-2019-18656?
Pimcore versions prior to 6.3.0, specifically version 6.2.3, are affected by CVE-2019-18656.
What type of vulnerability is CVE-2019-18656?
CVE-2019-18656 is an XSS vulnerability impacting the translations grid due to improper HTML handling.
Can CVE-2019-18656 be exploited remotely?
Yes, CVE-2019-18656 can potentially be exploited remotely if an attacker can interact with the affected translations grid.