Security Pimcore CMS 3.0.5 XSS / SQL Injection / Command Execution May 8, 2015 007admin Leave a comment Pimcore CMS version 3.0.5 suffers from command execution, cross site scripting, and remote SQL injection vulnerabilities.