High
CVE-2023-47115
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-22497
Cross-site Scripting in JFinal
Critical
CVE-2024-23636
Remote Command Execution in SOFARPC
Medium
CVE-2023-49783
No permission checks for editing/deleting records with CSV import form
Medium
CVE-2024-22490
Cross-site Scripting in beetl-bbs
Medium
CVE-2024-22496
Cross-site Scripting in JFinal
Medium
CVE-2024-23341
html injection vulnerability in the `tuitse_html` function.
Critical
CVE-2023-49657
Cross-site Scripting in Apache superset
Medium
CVE-2023-6927
keycloak-core: open redirect via "form_post.jwt" JARM response mode
Medium
CVE-2024-23339
Prototype pollution not blocked by object-path related utilities in hoolock
Medium
CVE-2024-23340
@hono/node-server cannot handle "double dots" in URL
Medium
CVE-2023-48714
Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
Medium
CVE-2023-44401
View permissions are bypassed for paginated lists of ORM data
High
CVE-2024-23345
XSS potential in rendered Markdown fields (comments, description, notes, etc.)
Medium
CVE-2023-7168
Better Follow Button for Jetpack <= 8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5529
Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-7197
Marketing Twitter Bot <= 1.11 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2023-7230
illi Link Party! <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6783
WolfNet IDX for WordPress <= 1.19.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-7029
WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-6697
WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting
Medium
CVE-2023-7086
SVG Uploads Support <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2023-7229
illi Link Party! <= 1.0 - Cross-Site Request Forgery to Settings Update
High
CVE-2023-7228
illi Link Party! <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.