Medium
CVE-2023-1918
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-1921
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'
Medium
CVE-2023-24418
Tiny carousel horizontal slider plus <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1925
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'
Medium
CVE-2023-1919
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'
Medium
CVE-2023-29422
Dynamics 365 Integration <= 1.3.13 - Missing Authorization via init
Critical
CVE-2023-27033
Unrestricted Upload of File with Dangerous Type in Cdesigner module for PrestaShop
Medium
CVE-2023-0842
xml2js is vulnerable to prototype pollution
High
CVE-2023-1887
thorsten/phpmyfaq vulnerable to business logic errors
Medium
CVE-2023-1788
Firefly III insufficiently expires sessions
High
CVE-2023-1886
thorsten/phpmyfaq vulnerable to authentication bypass
Medium
CVE-2023-1885
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter
Medium
CVE-2023-1884
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
Medium
CVE-2023-1883
thorsten/phpmyfaq vulnerable to improper access control
High
CVE-2023-1882
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
High
CVE-2023-1881
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
High
CVE-2023-1880
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
Medium
CVE-2023-1879
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
High
CVE-2023-1878
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
Medium
CVE-2023-1877
Microweber vulnerable to command injection
High
CVE-2023-1758
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
High
CVE-2023-1757
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
Medium
CVE-2023-1756
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Critical
CVE-2023-25330
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.