Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersthorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Silverstripe Form Capture vulnerable to stored cross-site-scripting
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name
Appwrite Server-Side Request Forgery vulnerability
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
pimcore is vulnerable to cross-site scripting in translate module
Magento Open Source allows Improper Access Control
NotrinosERP vulnerable to SQL Injection
Moodle arbitrary file read vulnerability
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
Moodle SQL Injection vulnerability
baserCMS allows any file to be uploaded
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.