High
CVE-2022-48282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-25657
Nautobot vulnerable to remote code execution via Jinja2 template rendering
High
CVE-2017-20178
Codiad information disclosure vulnerability
Medium
CVE-2021-32860
iziModal Cross-site Scripting vulnerability
Medium
CVE-2021-32859
Baremetrics date range picker vulnerable to Cross-site Scripting
Medium
CVE-2021-32855
Vditor Cross-site Scripting vulnerability
Medium
CVE-2021-32854
textAngular Cross-site Scripting vulnerability
Medium
CVE-2021-32856
Microweber Cross-site Scripting vulnerability
Medium
CVE-2021-32853
Erxes vulnerable to Cross-site Scripting
Medium
CVE-2021-32851
Mind-elixir Cross-site Scripting vulnerability
Medium
CVE-2021-32850
@claviska/jquery-minicolors vulnerable to Cross-site Scripting
Medium
fdd57b3b-bd0a-4b07-831e-72f2329b2577
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'instantEditRedirect' function
Medium
CVE-2023-25972
Старт <= 3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
f347a629-523e-4ec4-ad56-6ae9357dd7f5
Redirect Redirection <= 1.1.3 - Missing Authorization in 'saveRedirectSettings' function
Medium
CVE-2023-26014
Minify HTML <= 2.1.7 - Cross-Site Request Forgery in minify_html_menu_options
Medium
ef5f99ca-8a0d-4ec4-8b59-c0c4637dfbc3
Redirect Redirection <= 1.1.3 - Missing Authorization in 'statusBulkEdit' function
High
CVE-2023-23830
ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
e29dac44-5c85-4f73-ae96-4bc0deca64f4
Redirect Redirection <= 1.1.3 - Missing Authorization in 'bulkDelete' function
Medium
CVE-2023-26013
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
de69d597-b663-4c58-82e0-c90391fb8416
Redirect Redirection <= 1.1.3 - Missing Authorization in 'selectAll' function
Medium
dceca4ee-6587-4eaa-974e-a21e7a10b6e8
Redirect Redirection <= 1.1.3 - Missing Authorization in 'logPageContent' function
Medium
d4dacd15-85cc-41f5-830c-b02c85c798f9
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'cronLogDeleteOption' function
Medium
CVE-2023-0175
Smart Logo Showcase Lite <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
d433a5b3-4661-4246-ae60-8a99633372ad
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'deleteRedirect' function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.