Packagist/pimcore/pimcore CVE-2026-5362: medium, EPSS 0.29%

Pimcore has an authenticated Cross-site Scripting issue

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-7gxw-q9j5-mrj4
• https://nvd.nist.gov/vuln/detail/CVE-2026-5362
• https://fluidattacks.com/es/advisories/mago
• https://github.com/pimcore/pimcore

CVE-2026-5362 · published 2026-04-27T21:31:03Z · modified 2026-05-06T18:56:34.637864Z · JSON