Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filtersDcat-Admin vulnerable to Stored Cross-site Scripting
Craft CMS stored XSS in indexedVolumes
Craft CMS stored XSS in review volume
Craft CMS XSS in RSS widget feed
CraftCMS stored XSS in Quick Post widget error message
Code injection in nilsteampassnet/teampass
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
Moodle vulnerable to stored Cross-site Scripting
craftcms/cms vulnerable to cross site scripting in RSS feed widget
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Cross-site Scripting in Backdrop CMS
SVG Sanitizer library <= 0.15.4 - Cross-Site Scripting Bypass
PHAR deserialization allowing remote code execution
Craft CMS Stored Cross-site Scripting Injection Vulnerability
Microweber Cross-site Scripting vulnerability
Formwork Cross-site Scripting (XSS) from Page title field
Deserialization of Untrusted Data in thinkphp
CakePHP vulnerable to Denial of Service attack through XML payloads
pimcore is vulnerable to cross-site scripting via "title field " in data objects
XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
Flarum post mentions can be used to read any post on the forum without access control
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
ThinkCMF Stored Cross-Site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.