bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore prior to 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pimcore pimcore |