CVE-2024-11954
1 advisory.
Packagist/pimcore/pimcore CVE-2024-11954: high 8.1
Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document
Action: Upgrade pimcore/pimcore to 11.5.3 or later.
composer require pimcore/pimcore:11.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.4.2 | 11.5.3 | - |
Fixed versions
| 11.5.3 |
Sources
- osv: GHSA-xr3m-6gq6-22cg
- https://github.com/pimcore/pimcore/security/advisories/GHSA-xr3m-6gq6-22cg
- https://nvd.nist.gov/vuln/detail/CVE-2024-11954
- https://github.com/pimcore/pimcore
- https://vuldb.com/?ctiid.293905
CVE-2024-11954 · published · modified · JSON