pimcore/admin-ui-classic-bundle Security Advisories for v1.6.1 (2)
-
[LOW] Pimcore's Admin Classic Bundle allows HTML Injection
PKSA-p8mb-27jx-rxgt CVE-2025-30166 GHSA-x82r-6j37-vrgg
Affected version: <1.7.6
Reported by:
GitHub -
[MEDIUM] Pimcore Admin Classic Bundle allows user enumeration
PKSA-zrrf-rscm-s1xv CVE-2025-24980 GHSA-vr5f-php7-rg24
Affected version: <1.7.4
Reported by:
GitHub