Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 255
Reset filtersImproper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop
Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop
Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop
Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop
Improper neutralization of SQL parameter in Cookie Law - Banner + Cookie blocker module for PrestaShop
Improper neutralization of SQL parameter in Opart Save Cart for PrestaShop
Improper neutralization of SQL parameter in Opart Planned popup for PrestaShop
Improper neutralization of SQL parameter in Opart Faq for PrestaShop
XSS in FieldPopupNewsletter Prestashop Module
PHPInfo Exposure in MyPrestaModules SimpleImportProduct and UpdateProducts Modules
Improper neutralization of a SQL parameter in simpleimportproduct from MyPrestaModules module for PrestaShop
Improper neutralization of SQL parameter in Active Design - Full Affiliates module for PrestaShop
Improper neutralization of SQL parameter in LeoTheme - Leo Blog module for PrestaShop
Improper neutralization of SQL parameter in Bl Modules - XML Feeds PRO module for PrestaShop
Improper neutralization of SQL parameter in Carts Guru - Marketing automation multicanal module for PrestaShop
Improper neutralization of SQL parameter in Theme Volty Video Tab module for PrestaShop
Improper neutralization of SQL parameters in Theme Volty CMS Blog module for PrestaShop
Improper neutralization of a SQL parameter in aicustomfee from ai-dev module for PrestaShop
PrestaShop file deletion via CustomerMessage
PrestaShop file deletion via attachment API
Possible XSS injection through Validate::isCleanHTML method
SQL manager vulnerability (potential RCE)
[CVE-2023-39529][CVE-2023-39530] path traversal: file deletion in the backoffice
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.