High
ghsa-p84g-j2gh-83g3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2024-4160
Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
Medium
ghsa-mxjf-hc9v-xgv2
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
Medium
CVE-2024-5520
OpenCMS Cross-Site Scripting vulnerability
High
ghsa-45xg-4w5x-j429
TYPO3 Arbitrary Shell Execution in Swiftmailer library
High
ghsa-5h5v-m596-r6rf
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
Medium
ghsa-6xwf-7rfm-4gwc
TYPO3 Cross-Site Scripting in Filelist Module
High
CVE-2024-21512
mysql2 vulnerable to Prototype Pollution
Medium
ghsa-4ppr-jw47-9qm5
TYPO3 Cross-Site Scripting in Link Handling
Medium
ghsa-95qm-3xp7-vfj5
TYPO3 Cross-Site Scripting in Form Framework validation handling
High
ghsa-x428-565f-8xj2
TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
Medium
ghsa-g776-759r-pf6x
TYPO3 Broken Access Control in Import Module
High
ghsa-82vp-jr39-4j2j
TYPO3 Security Misconfiguration in Frontend Session Handling
Medium
CVE-2024-5427
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
Medium
ghsa-rv8r-8mh5-5376
TYPO3 Information Disclosure in Backend User Interface
Medium
ghsa-wj85-rg5g-v8jm
TYPO3 Information Disclosure in User Authentication
Medium
ghsa-p2h4-7fp3-cmh8
TYPO3 Disclosure of Information about Installed Extensions
Medium
CVE-2024-4376
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Medium
CVE-2024-4379
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
Medium
ghsa-wvvp-jwf5-qcpc
TYPO3 Information Disclosure in Page Tree
Medium
ghsa-xmgr-jff3-fcfv
TYPO3 Security Misconfiguration in User Session Handling
Medium
ghsa-4459-qrcc-vfcf
TYPO3 Cross-Site Scripting in Form Framework
Medium
ghsa-76r3-m635-p3vc
TYPO3 Cross-Site Scripting in Language Pack Handling
High
ghsa-f9hr-7cfq-mjg2
TYPO3 Arbitrary Code Execution via File List Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.