CVE-2023-1515

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

• CWE-79

• https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964Patch
• https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964Patch
• https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Mar 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1506A vulnerability, which was classified as critical, was found…8.1
• CVE-2023-1507A vulnerability has been found in SourceCodester E-Commerce …6.1
• CVE-2023-1508Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1509The GMAce plugin for WordPress is vulnerable to Cross-Site R…8.8
• CVE-2023-1513A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS …3.3
• CVE-2023-1514A vulnerability exists in the component RTU500 Scripting int…7.5
• CVE-2023-1516RoboDK versions 5.5.3 and prior contain an insecure permissi…7.8
• CVE-2023-1517Cross-site Scripting (XSS) - DOM in GitHub repository pimcor…4.8
• CVE-2023-1518CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vuln…7.5
• CVE-2023-1521On Linux the sccache client can execute arbitrary code with …7.8
• CVE-2023-1522SQL Injection in the Hardware Inventory report of Security C…8.8
• CVE-2023-1523Using the TIOCLINUX ioctl request, a malicious snap could in…10