Medium
bb2a67ff-a452-4ecb-9fd7-bf05fe43a2f7
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
a6b0b516-af5c-474a-a674-b52cf80207ec
Re:amaze Helpdesk & Live Chat <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2186
Simple Post Notes <= 1.7.5 - Subscriber+ Stored Cross-Site Scripting
Critical
7c3ae610-44ef-4354-b085-00c00a486dc9
Login with Cognito <= 1.4.6 - Authentication Bypass
Medium
CVE-2022-2118
404s <= 3.4.9 - Administrator+ Cross-Site Scripting
High
CVE-2022-2001
DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
6a226790-0774-43f6-a476-a2dac7ae153b
Freshdesk (official) <= 2.3.6 - Cross-Site Request Forgery
High
CVE-2022-30337
WP Meta SEO <= 4.4.8 - Cross-Site Request Forgery to Settings Update
Medium
58a1f3a1-e00c-4b63-83ad-73205c67c0ac
eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
Medium
35b46587-1c6e-4d3f-a8d0-e7797cee882d
GTM Server Side <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
2b072278-6627-42b2-a532-c8854c9a4921
Post Comments as bbPress Topics <= 2.2.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-2114
Data Tables Generator By Supsystic <= 1.10.19 - Cross-Site Scripting
High
CVE-2022-31091
Change in port should be considered a change in origin
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
High
CVE-2017-20064
Code injection in Elefant CMS
High
CVE-2017-20063
Unrestricted Upload of File with Dangerous Type in Elefant CMS
High
CVE-2017-20062
Cross-Site Request Forgery in Elefant CMS
Medium
CVE-2017-20061
Cross site scripting in Elefant CMS
Medium
CVE-2017-20060
Cross site scripting in Elefant CMS
Medium
CVE-2017-20059
Cross site scripting in Elefant CMS
Medium
CVE-2017-20058
Cross site scripting in Elefant CMS
Medium
CVE-2017-20057
Cross site scripting in Elefant CMS
Medium
CVE-2022-2130
Cross-site Scripting in Microweber
Medium
CVE-2022-2041
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element Content
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.