Description

pimcore is vulnerable to Stored XSS at Title field in the SEO & Settings tab of a Document page.

Payload

"><img src=x onerror=alert(1);>

Step to reproduce

1.Go to https://demo.pimcore.fun/admin/ and login.
2.Click on any document (Home, de,...) in the Documents
3.Go to SEO & Settings tab, in the Title field, input payload "><img src=x onerror=alert(1);>
You will see the XSS popup triggers.

Impact

This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie.