Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filterscode16 Sharp vulnerable to Cross Site Scripting (XSS)
ProcessWire CMS vulnerable to resource-exhaustion Denial of Service
Shopware Customer Orders can be canceled, even if refunds are disabled
Shopware exposes sensitive user information via CSV export mapping
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Shopware vulnerable to path traversal via Plugin upload
Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually
Citizen vulnerable to stored XSS in sticky header button messages
TastyIgniter vulnerable to Cross-Site Scripting
Cargo Mediawiki Extension vulnerable to Cross-site Scripting
ibexa/fieldtype-richtext has an XSS vulnerability via acronym custom tag in Rich Text
ibexa/admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
ezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
ibexa/user login enumerates user accounts
bagisto has Cross Site Scripting (XSS) in Create New Customer
bagisto has CSV Formula Injection in Create New Product
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
bagisto has Server Side Template Injection (SSTI) in Product Description
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.