Security Pimcore CMS 3.0.5 XSS / SQL Injection / Command Execution May 8, 2015 007admin Pimcore CMS version 3.0.5 suffers from command execution, cross site scripting, and remote SQL injection vulnerabilities.