CVE-2023-4453

MediumCVSS 5.4

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

A Cross-site Scripting (XSS) vulnerability is reflected in the GitHub repository pimcore/pimcore prior to version 10.6.8.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to version 10.6.8 or later to mitigate this vulnerability.

Original NVD description (English source)

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.