Medium
CVE-2024-8187
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-48021
Contact Form 7 – PayPal & Stripe Add-on <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-8964
Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-28709
LimeSurvey Cross Site Scripting vulnerability
Medium
CVE-2024-28710
LimeSurvey Cross Site Scripting vulnerability
Medium
CVE-2024-45932
Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
Medium
CVE-2024-45292
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks
Medium
CVE-2024-45291
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled
High
CVE-2024-45290
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
Medium
ghsa-pf56-h9qf-rxq4
Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page
High
CVE-2024-47818
Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability
Medium
CVE-2024-47817
Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS
Medium
CVE-2024-45060
PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
Medium
CVE-2024-8433
Easy Mega Menu Plugin for WordPress – ThemeHunk <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-8032
Smooth Gallery Replacement <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-9207
BuddyPress Docs <= 2.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-9529
Advanced Custom Fields <= 6.3.8 - Authenticated (Admin+) Limited Arbitrary Function Call
Medium
CVE-2024-8431
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Private Gallery Title Disclosure
Medium
CVE-2024-8488
Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8482
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
Medium
CVE-2022-4534
Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass
Medium
CVE-2024-8629
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-9292
Bridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-45293
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.