bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| pimcore/pimcore(Packagist) | 0 | 6.3.0 | N/A |
CVSS Metrics
