-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pimcore/pimcore | composer | < 10.5.21 | 10.5.21 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing input sanitization in setters that handle user-controlled data. The patches add htmlspecialchars() to these PHP setters and client-side sanitization in JS editors. These functions directly accepted user input without encoding, allowing stored XSS when values were rendered in admin UI elements. The high confidence comes from the direct correlation between the vulnerability description, CWE-79 classification, and the specific sanitization additions in the patch.
PHPPHPOngoing coverage of React2Shell