Medium
CVE-2023-4423
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
d9189eb3-be7f-42e1-92cc-b48af5615eb9
Inactive Logout <= 3.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-44142
Inactive Logout <= 3.2.2 - Missing Authorization
Medium
CVE-2023-44145
Anchor Episodes Index (Spotify for Podcasters) <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44144
Payment gateway per Product for WooCommerce <= 3.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-5050
Leaflet Map <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
Exploited in attacks
CVE-2022-24816
Improper Control of Generation of Code ('Code Injection') in jai-ext
Medium
CVE-2023-26143
blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API
Medium
CVE-2023-42399
Jodit Editor vulnerable to cross-site scripting
High
CVE-2023-5060
Cross site scripting in librenms
Medium
CVE-2023-37611
Neos CMS Cross Site Scripting vulnerability
High
CVE-2023-4861
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4862
File Manager Pro <= 1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5063
Widget Responsive for Youtube <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4971
Weaver Xtreme Theme Support <= 6.3.0 - Authenticated (Administrator+) PHP Object Injection via Imported File
Medium
CVE-2023-5062
WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
05206a31-033e-49b9-9b66-5a6165782643
Table of Contents Plus <= 2302 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-34575
Improper neutralization of SQL parameter in Opart Save Cart for PrestaShop
Critical
CVE-2023-34577
Improper neutralization of SQL parameter in Opart Planned popup for PrestaShop
Critical
CVE-2023-34576
Improper neutralization of SQL parameter in Opart Faq for PrestaShop
Critical
CVE-2023-33831
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
High
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Medium
CVE-2023-42441
Vyper has incorrect re-entrancy lock when key is empty string
High
CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.