CVE-2022-0955: Pimcore Data-Hub

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.

Affected products

• Pimcore Data-Hub: before 1.2.4 (fixed in 1.2.4)

Published 2022-03-24. Last modified 2026-06-17.