Medium
CVE-2022-4954
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2023-3999
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
Medium
CVE-2022-4487
Easy Accordion <= 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-2658
WP Spell Check <= 9.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4484
Super Socializer <= 7.13.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4658
RSSImport <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-3904
MonsterInsights <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via Google Analytics
High
CVE-2022-46175
json5 <= 1.0.1 and 2.0.0-2.2.1 - Prototype Pollution
High
CVE-2022-46170
CodeIgniter4 Potential Session Handlers Vulnerability
High
CVE-2022-23556
CodeIgniter4 allows spoofing of IP address when using proxy
Critical
CVE-2022-45347
Apache ShardingSphere-Proxy Incomplete Cleanup vulnerability
Medium
CVE-2022-25948
liquidjs may leak properties of a prototype
Medium
CVE-2022-23541
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
Medium
CVE-2022-23540
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
High
CVE-2022-23539
jsonwebtoken unrestricted key type could lead to legacy keys usage
Medium
CVE-2022-4644
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
High
CVE-2022-4646
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Medium
CVE-2022-4647
Microweber vulnerable to Stored Cross-Site Scripting
Medium
CVE-2022-4640
Mingsoft MCMS Cross-site Scripting vulnerability
Medium
CVE-2022-4638
A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The man
Medium
CVE-2022-4482
Carousel, Slider, Gallery by WP Carousel <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4453
3D FlipBook <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4648
Real Testimonials <= 2.5.11 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2022-4478
Font Awesome <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.