Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 43
Reset filtersMagento's X-Original-Url header can expose admin url
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
PrivateBin is missing HTML sanitization of attached filename in file size hint
drupal/bootstrap_site_alert - SA-CONTRIB-2025-042
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
Moodle allows attacks to obtain sensitive information
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby
Cross-Site Scripting in Bootstrap Package
drupal/fac - SA-CONTRIB-2021-005
Using JS libraries with known security vulnerabilities
Bootstrap Vulnerable to Cross-Site Scripting
bootstrap Cross-site Scripting vulnerability
XSS vulnerability that affects bootstrap
Bootstrap Cross-site Scripting vulnerability
drupal/bootstrap - SA-CONTRIB-2018-074
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.