Medium
ghsa-xx4c-jj58-r7x6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-36186
Unsafe Deserialization in jackson-databind
High
CVE-2021-3950
Cross-site Scripting in django-helpdesk
Medium
5de937cc-da05-4b95-807d-dc19a8b7d6b0
Child Theme Generator <= 2.2.7 Cross-Site Request Forgery to Arbitrary Folder Deletion
High
CVE-2021-39353
Easy Registration Forms <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-42363
Preview E-Mails for WooCommerce <= 1.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-41273
Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
Medium
98be1eb8-ee7d-4a39-b70f-5037b651ba96
Pixel Cat – Conversion Pixel Manager <= 2.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24982
Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting
High
3c476263-72b7-48f1-8ba3-91d69eae7b6a
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection
High
CVE-2021-25976
Cross-Site Request Forgery in PiranhaCMS
Critical
CVE-2021-37580
Improper Authentication in Apache ShenYu Admin
High
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
High
CVE-2021-41164
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
Unrated
drupal-core-2021-011
Drupal core - SA-CORE-2021-011
Unrated
drupal-contrib-2021-044
drupal/openid_connect_windows_aad - SA-CONTRIB-2021-044
Medium
CVE-2021-36884
Backup Migration <= 1.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
3b8ea0b1-5050-43fc-8b80-b6a501a607fe
Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.1 - Reflected Cross-Site Scripting
High
CVE-2020-28472
Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader
Critical
CVE-2021-43608
DBAL 3 SQL Injection Security Vulnerability
Medium
CVE-2021-41258
Cross-site scripting (XSS) from image block content in the site frontend
Medium
CVE-2021-41252
Cross-site scripting (XSS) from writer field content in the site frontend
High
CVE-2021-20846
Push Notifications for WordPress (Lite) < 6.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-24828
Mortgage Calculator / Loan Calculator < 1.5.17 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.