CVE-2018-14059: Pimcore

Medium severity, CVSS 5.4. EPSS: 3.1% chance of exploitation in the next 30 days.

Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

Affected products

• Pimcore Pimcore: up to and including 5.2.3

Published 2018-08-24. Last modified 2026-06-17.