CVE-2026-109392 | Pimcore up to 2026.3.1 ExternalImage Fields cross site scripting

October 12, 2026 Yanac

A vulnerability classified as problematic was found in Pimcore up to 2026.3.1. Affected is an unknown function of the component ExternalImage Fields. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-109392. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More