Pilz vulnerabilities
Published CVEs affecting Pilz products: 2 record(s), with severity, exploitation and fixes.
CVE-2023-45796
High · 8.1
CWE-79 Jun 22, 2026
XSS vulnerability in Pilz PASvisu and PMI v8xx
A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.
CVE-2023-45795
High · 7.8
CWE-79 Jun 22, 2026
Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx
A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.