Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 138
Reset filtersCross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Cross-site Scripting (XSS) in Document Properties Parameter
SQL Injection in AssetController
Cross-site Scripting (XSS) in Website Settings name field
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Cross-site Scripting (XSS) in DataObject Classification Store
SQL Injection in Admin Translations API
SQL Injection in Translation Export API
SQL Injection in Admin Search Find API
pimcore is vulnerable to cross-site scripting in Composite indices key field
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
pimcore is vulnerable to cross-site scripting in translate module
Pimcore vulnerable to improper quoting of filters in Custom Reports
Pimcore Remote Code Execution vulnerability in Search function
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Cross-site Scripting (XSS) in UrlSlug Data type
Reflected XSS in Application Logger module
Cross-site Scripting (XSS) in Document Types
Cross-site Scripting (XSS) - stored in Print Documents
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.