← Database

CVE-2021-39170

HIGH CVSS: 8.0 Published: 2021-09-01 Modified: 2026-06-17

Description

Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could add XSS code as a value of custom metadata on assets. There is a patch for this issue in Pimcore version 10.1.2. As a workaround, users may apply the patch manually.

Affected Platforms

Pimcore Pimcore

Weakness Type

CWE-116, CWE-79

References