Medium
CVE-2025-31677
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Medium
CVE-2025-31678
drupal/ai - SA-CONTRIB-2025-004
Medium
CVE-2025-31128
drupal/gifplayer - SA-CONTRIB-2025-032
Medium
CVE-2025-2967
ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field
Medium
CVE-2025-28094
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
Medium
CVE-2025-28093
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
Medium
CVE-2025-28092
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
Medium
CVE-2025-30741
Pixelfed may allow unauthorized actor to view private posts and private users
Medium
CVE-2025-23204
API Platform Core does not call GraphQl securityAfterResolver
Medium
CVE-2025-2689
yiisoft Yii2 Deserialization of Untrusted Data
Low
CVE-2025-31675
Drupal core - SA-CORE-2025-004
Medium
CVE-2025-30152
Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout
Medium
CVE-2025-30081
Clickstorm SEO Allows Cross-Site Scripting (XSS)
Medium
CVE-2025-30083
Additional TCA Allows Cross-Site Scripting (XSS)
Medium
CVE-2025-29790
Contao Vulnerable to Cross-Site Scripting (XSS) through SVG uploads
High
CVE-2024-44313
TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function
Medium
CVE-2024-44314
TastyIgniter Has an Incorrect Access Control Vulnerability
Medium
CVE-2025-29788
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Low
CVE-2025-28010
MODX allows cross-site scripting (XSS) via an SVG file
Medium
CVE-2025-27794
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Medium
ghsa-3wgq-h4fr-cwg5
laravel-crud-wizard-free has File Validation Bypass
Low
CVE-2025-2214
Microweber vulnerable to XSS attack due to insure `group` component in its Settings handler
Medium
CVE-2025-27617
Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Medium
CVE-2025-48958
Froxlor has an HTML Injection Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.