https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T14:25:00.428191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-43233 cnvd-2023-43233 2026-10-25T14:25:00.431392+00:00 cnvd-2023-43233 https://cve.radiocsirt.org/vuln/euvd-2026-212134 EUVD-2026-212134 2026-10-25T14:25:00.431423+00:00 EUVD-2026-212134 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2630 fkie_cve-2023-2630 2026-10-25T14:25:00.431439+00:00

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

 https://cve.radiocsirt.org/vuln/ghsa-w766-3572-f2hv GHSA-w766-3572-f2hv — Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations 2026-10-25T14:25:00.431465+00:00

Affected: Packagist: pimcore/pimcore

### Impact Execute Javascript code on victim browsers and potentially steal cookies to takeover their account.

### Patches Update to version 10.5.21 or apply this patches manually https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch

### Workarounds Apply patches manually: https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch

### References https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e/

 https://cve.radiocsirt.org/vuln/gsd-2023-2630 gsd-2023-2630 2026-10-25T14:25:00.431493+00:00 gsd-2023-2630