Medium
CVE-2023-2429
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-2428
phpMyFAQ vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-28477
Stored cross site scripting on API integration
Low
CVE-2023-28820
Stored cross site scripting in RSS displayer
Low
CVE-2023-28819
Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names
Medium
CVE-2023-28821
Missing rate limit for password resets
Medium
CVE-2023-28475
Reflected cross site scripting
Medium
CVE-2023-28472
Concrete CMS missing secure cookie parameters
Medium
CVE-2023-28471
Stored cross site scripting via container name
Medium
CVE-2023-28474
Stored cross site scripting on saved presets
Medium
CVE-2023-28476
Stored cross site scripting on tags
Critical
CVE-2023-28473
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
High
CVE-2023-2356
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
Medium
CVE-2022-47176
Depicter Slider <= 1.9.0 - Missing Authorization on 'make' function
Medium
CVE-2023-31232
Plugins List <= 2.5 - Authenticated (Author+) Stored Cross-Site Scripting via replace_plugin_list_tags
Medium
CVE-2022-45809
Thumbs Rating <= 5.0.0 - Race Condition
Medium
CVE-2023-30780
User IP and Location <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47590
Maintenance Switch <= 1.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-47587
WP Search Analytics <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2279
WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display
Medium
CVE-2023-2277
WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem
Medium
CVE-2022-47606
WP-CORS <= 0.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2402
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2023-31228
CM On Demand Search And Replace <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.