CVE-2022-0704: Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Published Mar 16, 2022
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
Affected Software
1 affected component
Pimcore pimcore<=10.3.0
Remediation
Event History
Mar 16, 2022
CVE Published
via MITRE·09:15 AM
Data Sourced
via MITRE·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0704?
The severity of CVE-2022-0704 is rated as medium with a CVSS score of 5.4.
2
How can I fix the Cross-site Scripting (XSS) vulnerability in pimcore/pimcore prior to 10.4.0?
To fix the Cross-site Scripting (XSS) vulnerability in pimcore/pimcore prior to version 10.4.0, it is recommended to update to version 10.4.0 or later.
3
What software is affected by CVE-2022-0704?
The software affected by CVE-2022-0704 is Pimcore Pimcore versions up to and including 10.3.0.