{"id":"CVE-2019-18656","aliases":["GHSA-65p8-5423-fw3x"],"url":"https://o3.security/vulnerability/CVE-2019-18656","summary":"Pimcore XSS Vulnerability","details":"Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.","published":"2019-10-31T17:15:10.570Z","modified":"2026-08-07T15:18:14.087199Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"pimcore/pimcore","fixedVersion":"6.3.0"}],"fix":{"url":"https://github.com/pimcore/pimcore/commit/ca036e9f86bb5cdb3dac0930ec131e5f35e26c5f","label":"pimcore/pimcore@ca036e9"},"references":[{"type":"FIX","url":"https://github.com/pimcore/pimcore/commit/ca036e9f86bb5cdb3dac0930ec131e5f35e26c5f"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T15:18:14.087199Z"}}