Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersCross site scripting in Elefant CMS
Cross site scripting in Elefant CMS
Cross site scripting in Elefant CMS
Cross site scripting in Elefant CMS
Cross-site Scripting in Microweber
Guzzle <= 6.5.7 and 7.0-7.4.4 - Information Exposure
WooCommerce <= 6.5.1 - Authenticated (Admin+) HTML Injection
brotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting
brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS
Insufficient Session Expiration in TYPO3's Admin Tool
Cross-Site Scripting in TYPO3's Frontend Login Mailer
Cross-Site Scripting in TYPO3's Form Framework
Insertion of Sensitive Information into Log File in typo3/cms-core
Information Disclosure via Export Module
Incorrect Authorization in thinkcmf
Cross site scripting in dolibarr
SQL Injection in RosarioSIS
Cross site scripting in facturascripts
Cross-site Scripting in FacturaScripts
Cross-site Scripting in SEOmatic plugin
Code Injection in SEOmatic
Cross site scripting in intelliants/subrion
Cross site scripting in francoisjacquet/rosariosis
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.