Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersclass.upload.php allows cross-site scripting attacks via uploaded files
Froxlor username/surname AND company field Bypass
Craft CMS Privilege Escalation
PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)
PrestaShop some attribute not escaped in Validate::isCleanHTML method
plotly.js prototype pollution vulnerability
Gila CMS SQL Injection vulnerability
Gila CMS SQL Injection vulnerability
Gila CMS SQL Injection
Winter CMS Local File Inclusion through Server Side Template Injection
Winter CMS Stored XSS through Backend ColorPicker FormWidget
Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming
Concrete CMS Cross Site Request Forgery (CSRF)
Potential URI resolution path traversal in the AWS SDK for PHP
Cross-Site Request Forgery (CSRF) in automad/automad
Authenticated Blind SSRF in automad/automad
drupal/dvf - SA-CONTRIB-2023-055
Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
Corveda PHPSandbox Protection Mechanism Failure vulnerability
yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
yiisoft/yii2-authclient's Oauth2 PKCE implementation is vulnerable
phpMyFAQ Cross-site Scripting vulnerability
phpMyFAQ Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.