Medium
CVE-2025-62418
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-62416
bagisto has Server Side Template Injection (SSTI) in Product Description
Low
CVE-2025-62412
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
Low
CVE-2025-61924
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
Medium
CVE-2025-61923
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
High
CVE-2025-53092
Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
Medium
CVE-2025-25298
Strapi Password Hashing is Missing Maximum Password Length Validation
Medium
CVE-2025-11842
Smidge is vulnerable to Path Traversal
High
CVE-2024-56143
Strapi Allows Unauthorized Access to Private Fields via parms.lookup
Medium
CVE-2025-62415
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Medium
CVE-2025-62411
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Medium
CVE-2025-41254
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
High
CVE-2025-41253
Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection
Medium
CVE-2025-3930
Strapi is vulnerable to Insufficient Session Expiration
Critical
CVE-2025-54539
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
Medium
CVE-2025-62062
Easy Post Submission <= 1.7.0 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-62059
SureRank <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-62960
Construction Light <= 1.6.7 - Missing Authorization
Medium
CVE-2025-62072
Front End Users <= 3.2.33 - Missing Authorization
Medium
CVE-2025-62032
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-62008
Product Table For WooCommerce <= 1.2.4 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-62964
MDTF <= 1.3.6 - Missing Authorization
Medium
CVE-2025-62963
Estatik <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62042
Event post <= 5.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.