Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersphpMyFAQ Stored Cross-site Scripting vulnerability
phpMyFAQ Cross-site Scripting vulnerability
phpMyFAQ vulnerable to improper input validation
phpMyFAQ has weak password requirements
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
phpMyFAQ Code Injection vulnerability
smarty Cross-site Scripting vulnerability in Javascript escaping
drupal/xray_audit - SA-CONTRIB-2023-012
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Improper Access Control
Magento Open Source allows XML Injection
Moodle may allow students to bypass sequential navigation during a quiz attempt
Moodle may display roles to users who don't have access to them
NotrinosERP vulnerable to SQL Injection
Moodle arbitrary file read vulnerability
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
Moodle vulnerable to Cross-site Scripting
Moodle SQL Injection vulnerability
Moodle vulnerable to Cross-site Request Forgery
Moodle may allow authenticated users to enumerate other user's names via learning plans page
Moodle may allow teachers to access the names of users they could not otherwise access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.