Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filtersPresta Shop vulnerable to email enumeration
PrestaShop cross-site scripting via customer contact form in FO, through file upload
PrestaShop some attribute not escaped in Validate::isCleanHTML method
Improper neutralization of SQL parameter in PrestaHero (ETS Soft) - BLOG - Drive High Traffic & Boost SEO module for PrestaShop
Improper neutralization of SQL parameter in Bl Modules - CSV Feeds PRO module for PrestaShop
Possible XSS injection through Validate::isCleanHTML method
Improper neutralization of SQL parameters in the Boxtal (envoimoinscher) module from Boxtal for PrestaShop
PrestaShop PHP Object Injection
Possible XSS injection through Validate::isCleanHTML method
Server Side Twig Template Injection
Improper neutralization of SQL parameter in SmartBlog module from SmartDataSoft for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.