Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filtersphpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
TorrentPier is Vulnerable to Authenticated SQL Injection through Moderator Control Panel's topic_id parameter
PrivateBin is missing HTML sanitization of attached filename in file size hint
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Citizen vulnerable to stored XSS in sticky header button messages
bagisto has Cross Site Scripting (XSS) in Create New Customer
bagisto has Server Side Template Injection (SSTI) in Product Description
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Shopware: Reflective Cross Site-Scripting (XSS) in CMS components
Maho is Vulnerable to Authenticated Remote Code Execution via File Upload
YesWiki Cross Site Scripting vulnerability
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Badaso CMS file upload vulnerability
Adminer PHP Object Injection issue leads to Denial of Service
UnoPim has CSV Injection on Quick Export feature
moonshine Stored Cross-Site Scripting Vulnerability in Create Admin
moonshine Stored Cross-Site Scripting Vulnerability in Create Article
LibreNMS allows stored XSS in Alert Template name field
Bolt CMS vulnerable to authenticated remote code execution
starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
TabberNeue vulnerable to Stored XSS through wikitext
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.