Description

pimcore is vulnerable to Stored XSS at Expiry field in the Redirects module.

Payload

"><img src=x onerror=alert(document.domain);>

Step to reproduce/Proof of Concept

1.Go to https://demo.pimcore.fun/admin/ and login.
2.In the left menu bar, go to Tools -> Redirects.
3.In the Redirects tab, click Add button, input any text into the Source and Target field and click Save.
4.In the new added record, at the Expiry column, input payload "><img src=x onerror=alert(document.domain);>
You will see the XSS popup triggers.

Impact

This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites.