Medium
CVE-2022-4391
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-4479
Table of Contents Plus <= 2106 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3923
ActiveCampaign for WooCommerce <= 1.9.7 - Cross-Site Request Forgery
Medium
CVE-2022-45806
Formidable Form Builder <= 5.5.4 - Cross-Site Request Forgery
High
CVE-2022-46859
Spiffy Calendar <= 4.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2022-40373
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2022-40002
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2022-40001
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2022-40000
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2021-36573
FeehiCMS Unrestricted Upload vulnerability
Medium
CVE-2021-36572
FeehiCMS Cross Site Scripting vulnerability
Critical
CVE-2021-4245
npm package rfc6902 vulnerable to Prototype Pollution
Critical
CVE-2021-33420
replicator vulnerable to Deserialization of Untrusted Data
Medium
CVE-2020-24855
easywebpack-cli Path Traversal vulnerability
Medium
CVE-2020-36607
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2020-20589
FeehiCMS vulnerable to Cross Site Scripting
Medium
CVE-2022-4521
WSO2 carbon-registry vulnerable to Cross-site Scripting
Medium
CVE-2022-4520
WSO2 carbon-registry Cross-site Scripting vulnerability
Medium
CVE-2022-4526
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
Medium
CVE-2022-4527
A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.
Medium
CVE-2022-4524
Roots Soil plugin vulnerable to Cross-site Scripting
Medium
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Medium
CVE-2022-4103
Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation
Medium
CVE-2022-4368
WP CSV <= 1.8.0.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.