CVE-2024-11954
LOWpimcore 11.4.2 - Cross-Site Scripting in Search Document
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-11954. PoCs published by maeitsec.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Pimcore's Data Object Classification Store due to insufficient input sanitization. An authenticated attacker can inject malicious JavaScript code, which executes in the context of other users' browsers.
Description
A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Pimcore's Data Object Classification Store due to insufficient input sanitization. An authenticated attacker can inject malicious JavaScript code, which executes in the context of other users' browsers.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N