CVE-2024-11954

A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.4 LOW
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
VulDBCNA
2.4 LOW
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Common Weakness Enumeration
References
https://github.com/pimcore/pimcore/security/advisories/GHSA-xr3m-6gq6-22cg
https://vuldb.com/?ctiid.293905
https://vuldb.com/?id.293905
https://vuldb.com/?submit.451774
https://github.com/pimcore/pimcore/security/advisories/GHSA-xr3m-6gq6-22cg
https://vuldb.com/?submit.451774