Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCraft CMS Cross site Scripting vulnerability
Craft CMS Stored Cross-site Scripting in User Addresses Title
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
Shopware contains sensitive data in backend customer module
Shopware access control list bypassed via crafted specific URLs
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
TYPO3 CMS vulnerable to User Enumeration via Response Timing
TYPO3 CMS missing check for expiration time of password reset token for backend users
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController
TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper
Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto
ThinkPHP deserialization vulnerability
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Feehi CMS host header injection vulnerability
UniSharp Laravel Filemanager directory traversal vulnerability
Moodle Cross-site Scripting vulnerability
Awesome Support <= 6.0.7 - Authenticated Stored Cross-Site Scripting
Appwrite Vulnerable to Cross-site Scripting
drupal/permissions_by_term - SA-CONTRIB-2022-056
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.