Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersConcrete CMS vulnerable to cross-site scripting in the text input field
Craft CMS discloses password hashes
phpxmlrpc vulnerable to argument injection
ThinkCMF Cross Site Request Forgery (CSRF) vulnerability
ThinkCMF Stored Cross-Site Scripting (XSS)
Zenario CMS is vulnerable to Remote Code Execution (RCE).
drupal/socialbase - SA-CONTRIB-2022-060
Tribal Systems Zenario CMS vulnerable to Session Fixation
baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability
code injection in phpxmlrpc/phpxmlrpc
Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
Browsershot vulnerable to Cross-Site Scripting (XSS)
Browsershot does not validate URL protocols passed to Browsershot URL method
Badaso vulnerable to Remote Code Execution (RCE)
Browsershot version 3.57.3 vulnerable to improper input validation
Microweber vulnerable to cross-site scripting (XSS)
PyroCMS vulnerable to stored Cross Site Scripting
Moodle stored-XSS vulnerability in some "social" user profile fields
Moodle reflected cross-site scripting vulnerability in policy tool
Cross-Site Request Forgery in Moodle
Cross-site Scripting in Backdrop CMS
Account Takeover Through Password Reset Poisoning
Cross-site Scripting in Backdrop CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.