An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.