Medium
d0cb4434-94c5-42a9-bd86-869058dcbf67
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-1649
AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1660
ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard
Medium
CVE-2023-0769
hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-0824
UserPlus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-0894
Pickup | Delivery | Dine-in date time <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
718e54f5-f040-42d6-958d-255d905615d5
Forminator <= 1.22.1 - Missing Authorization on 'load_recaptcha_preview' AJAX function
Medium
CVE-2023-0421
Cloud Manager <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2023-1650
ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies
Medium
CVE-2023-1806
WP Inventory Manager <= 2.1.0.11 - Reflected Cross-Site Scripting via 'message'
Medium
2ef15cb1-b320-42d9-a2fd-afff2ec8a93b
Forminator <= 1.22.1 - Missing Authorization on 'load_hcaptcha_preview' AJAX function
High
CVE-2023-28260
.NET Remote Code Execution vulnerability
Critical
CVE-2023-26122
safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
Critical
CVE-2023-26121
safe-eval vulnerable to Prototype Pollution via the safeEval function
Medium
CVE-2023-1917
PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Unrated
CVE-2023-23753
Visforms Base Package for Joomla! - SQL Injection
Critical
CVE-2023-27032
Improper neutralization of SQL parameter in Idnovate - AdvancedPopupCreator module for PrestaShop
High
CVE-2023-1970
yuan1994 tpAdmin Unrestricted Upload of File with Dangerous Type vulnerability
Medium
CVE-2023-1971
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
Critical
CVE-2023-29215
Apache Linkis JDBC EngineConn has deserialization vulnerability
Critical
CVE-2023-29216
Apache Linkis DatasourceManager module has deserialization vulnerability
Medium
CVE-2023-26120
XXL-JOB vulnerable to Cross-site Scripting
Medium
CVE-2023-1125
Ruby Help Desk <= 1.3.3 - Missing Authorization to Arbitrary Ticket Modification
Medium
CVE-2023-1804
Product Catalog Feed by PixelYourSite <= 2.1.0 - Reflected Cross-Site Scripting via 'edit'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.