Critical
CVE-2023-2227
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2022-48150
Shopware vulnerable to cross-site scripting (XSS)
Medium
CVE-2023-2202
RosarioSIS improper access control vulnerability
Medium
CVE-2023-28174
eRocket <= 1.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
e5eea72d-f10b-460b-be00-bb5b1c4a1a62
Image Optimizer WD <= 1.0.26 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28533
Cab Grid <= 1.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30874
GPS Plotter <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27624
Redirect After Login <= 0.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27627
Woocommerce Email Report <= 2.4 - Unauthenticated Cross-Site Scripting
Medium
a5436d14-cbb5-420f-9f3a-698ce59c1e1e
Formilla Chat and Marketing Automation <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaToolsID'
Medium
CVE-2023-31071
Modal Dialog <= 3.5.14 - Reflected Cross-Site Scripting
Medium
59f7a1b2-f718-40e7-8030-b9212edf71b7
Formilla Edge <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaPluginID'
Medium
CVE-2023-28622
Easy Slider Revolution <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via esrcpt_slider_allow_iframes_filter
Medium
CVE-2023-30876
Dave's WordPress Live Search <= 4.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23727
Formilla Live Chat <= 1.3.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaID'
Critical
CVE-2023-29525
XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration
Critical
CVE-2023-29527
XWiki Platform vulnerable to code injection from account through AWM view sheet
Critical
CVE-2023-29526
XWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode
Critical
CVE-2023-29524
XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet
Critical
CVE-2023-29523
XWiki Platform vulnerable to code injection in display method used in user profiles
High
CVE-2023-29522
XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet
High
CVE-2023-29521
XWiki Platform vulnerable to code injection from account/view through VFS Tree macro
Medium
CVE-2023-29520
XWiki Platform vulnerable to page render failure due to broken translations
High
CVE-2023-29519
org.xwiki.platform:xwiki-platform-attachment-ui vulnerable to Code Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.