Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filtersHax CMS Stored Cross-Site Scripting vulnerability
PHPOffice Math allows XXE when processing an XML file in the MathML format
LibreNMS stored Cross-site Scripting vulnerability in poller group name
league/commonmark contains a XSS vulnerability in Attributes extension
YesWiki Stored XSS Vulnerability in Comments
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Silverstripe Framework has a XSS vulnerability in HTML editor
Silverstripe cross-site scripting (XSS) attack in elemental "Content blocks in use" report
Pimcore's Admin Classic Bundle allows HTML Injection
Yeswiki Path Traversal vulnerability allows arbitrary read of files
Froxlor has an HTML Injection Vulnerability
Concrete CMS affected by a stored XSS in Folder Function.The "Add Folder" functionality
Volt Allows RCE Via User-Crafted Requests
Leantime allows Stored Cross-Site Scripting (XSS)
Leantime allows Stored Cross-Site Scripting (XSS)
Leantime allows Refelected Cross-Site Scripting (XSS)
Dolibarr Cross-site Scripting vulnerability
Dolibarr Cross-site Scripting vulnerability
Reflected Cross Site Scripting (XSS) in error message
Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet
Authenticated Stored XSS in YesWiki
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.