Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 121
Reset filtersConcrete CMS Cross Site Request Forgery (CSRF) vulnerability
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Concrete CMS Stored XSS
Concrete CMS Stored XSS in Layout Preset Name
Concrete CMS vulnerable to stored XSS via the Role Name field
Concrete CMS vulnerable to reflected XSS via the Image URL Import Feature
Concrete CMS vulnerable to stored XSS in file tags and description attributes
Concrete CMS Cross Site Request Forgery (CSRF)
Concrete CMS allows unauthorized access because directories can be created with insecure permissions
Concrete CMS Cross-site Scripting vulnerability
Concrete CMS Cross-site Scripting vulnerability
ConcreteCMS vulnerable to Stored Cross-site Scripting
ConcreteCMS Cross-site Scripting vulnerability
ConcreteCMS Cross-site Scripting vulnerability
ConcreteCMS Cross-site Scripting vulnerability
ConcreteCMS Cross-site Scripting vulnerability
ConcreteCMS Cross-site Scripting vulnerability
Concrete CMS Cross-site Scripting vulnerability
Stored cross site scripting on API integration
Stored cross site scripting in RSS displayer
Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names
Missing rate limit for password resets
Reflected cross site scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.