Packagist/pimcore/admin-ui-classic-bundle

Pimcore Admin Classic Bundle allows user enumeration

Modified: 2/11/2025

Pimcore Host Header Injection in user invitation link

Modified: 9/10/2026

Pimcore Admin Classic Bundle permissions are not getting checked when working with tags

Modified: 9/10/2026

pimcore/admin-ui-classic-bundle Unverified Password Change

Modified: 11/10/2025

Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls

Modified: 2/16/2024

pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document

Modified: 2/21/2024

SQL Injection in Admin download files as zip

Modified: 9/10/2026

Pimcore vulnerable to disclosure of system and database information behind /admin firewall

Modified: 9/10/2026

Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Modified: 7/10/2026

Pimcore includes vulnerable PHPOffice/PhpSpreadsheet

Modified: 12/5/2024

Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" Listing

Modified: 2/3/2026

Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page

Modified: 2/22/2024

Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

Modified: 2/16/2024

Vulnerable embedded jQuery Version

Modified: 12/2/2024

pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations

Modified: 9/10/2026

Host header injection in the password reset

Modified: 9/10/2026

Pimcore's Admin Classic Bundle allows HTML Injection

Modified: 4/8/2025