Medium
CVE-2023-1155
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
701bf711-d692-4eb1-8459-befa62264b97
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-27451
Instant Images <= 5.1.0.1 - Authenticated (Author+) Server-Side Request Forgery via instant_images_download
Medium
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Medium
CVE-2023-27443
Simple Vimeo Shortcode <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-47152
ClickFunnels <= 3.1.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-27447
WP SMS <= 6.0.4 - Information Disclosure via REST API
Medium
CVE-2023-27457
Add Expires Headers & Optimized Minify <= 2.7 - Cross-Site Request Forgery via [placeholder]
Medium
CVE-2023-27452
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27453
LWS Tools <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2022-42882
Simple CSV/XLS Exporter <= 1.5.8 - CSV Injection
Medium
CVE-2023-27446
DeepL Pro API translation <= 2.1.4 - Cross-Site Request Forgery via saveSettings
Medium
CVE-2023-27458
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 - Cross-Site Request Forgery via wpstream_settings
Medium
CVE-2023-1116
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Medium
CVE-2023-1117
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Medium
CVE-2023-1115
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
High
CVE-2023-22738
vantage6 vulnerable to Improper Preservation of Permissions
Medium
CVE-2023-26491
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
Medium
CVE-2022-1274
HTML Injection in Keycloak Admin REST API
High
CVE-2022-4137
Keycloak Cross-site Scripting on OpenID connect login service
Unrated
drupal-contrib-2023-008
drupal/group_forum - SA-CONTRIB-2023-008
Medium
CVE-2022-39228
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists
Medium
CVE-2022-1438
Keycloak vulnerable to Cross-site Scripting
Unrated
drupal-contrib-2023-006
drupal/better_social_sharing_buttons - SA-CONTRIB-2023-006
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.