CVE-2023-2730: Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
Other sources
Pimcore prior to 10.3.3 is vulnerable to stored cross-site scripting at the Title field in SEO & Settings tab of Document.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2730?
The severity of CVE-2023-2730 is medium with a CVSS score of 5.4.
What is the vulnerability description of CVE-2023-2730?
CVE-2023-2730 is a Cross-site Scripting (XSS) vulnerability that allows an attacker to inject malicious scripts into a GitHub repository.
Which software versions are affected by CVE-2023-2730?
CVE-2023-2730 affects Pimcore prior to version 10.3.3.
How can I fix CVE-2023-2730?
To fix CVE-2023-2730, update your Pimcore software to version 10.3.3 or later.
Where can I find more information about CVE-2023-2730?
You can find more information about CVE-2023-2730 in the following references: [GitHub Commit](https://github.com/pimcore/pimcore/commit/8ab06bfbb5a05a1b190731d9c7476ec45f5ee878), [Huntr Bounty](https://huntr.dev/bounties/6c6f5c26-d545-4e7b-82bb-1fe28006c885).