CVE-2023-2630

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-263007.8A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privileCVE-2023-263019.8Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a laCVE-2023-263025.5Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid CVE-2023-263035.5Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially craftCVE-2023-263099.8A remote code execution vulnerability in the webview component of OnePlus Store app.CVE-2023-26314.3A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attackCVE-2023-263109.8There is a command injection problem in the old version of the mobile phone backup app.CVE-2023-263119.8A remote code execution vulnerability in the webview component of OPPO Store app.CVE-2023-263148.8The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type CVE-2023-263158.8The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filterCVE-2023-263166.1A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking funcCVE-2023-263179.8Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from
CVE-2023-2630: Medium severity, CVSS 4.8 | Vulnix