Medium
CVE-2023-1788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-1886
thorsten/phpmyfaq vulnerable to authentication bypass
Medium
CVE-2023-1885
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter
Medium
CVE-2023-1884
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
Medium
CVE-2023-1883
thorsten/phpmyfaq vulnerable to improper access control
High
CVE-2023-1882
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
High
CVE-2023-1881
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
High
CVE-2023-1880
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
Medium
CVE-2023-1879
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
High
CVE-2023-1878
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
Medium
CVE-2023-1877
Microweber vulnerable to command injection
High
CVE-2023-1758
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
High
CVE-2023-1757
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
Medium
CVE-2023-1756
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Critical
CVE-2023-25330
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
Critical
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
High
CVE-2023-0265
Uvdesk remote code execution vulnerability
Medium
CVE-2023-0325
Uvdesk vulnerable to stored cross-site scripting (XSS)
High
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
Medium
CVE-2023-1871
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Reset
High
CVE-2021-4334
Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options
Medium
CVE-2022-4937
WCFM Frontend Manager <= 6.6.0 - Missing Authorization
Medium
c80833c3-8ffc-41a1-8d11-dafa962191fd
Product Feed PRO for WooCommerce <= 12.4.4 - Cross-Site Request Forgery
Medium
CVE-2023-1870
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.