High
CVE-2018-10189
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
High
CVE-2017-1000489
Disabled users able to log in with third party SSO plugin
Medium
CVE-2018-8071
XSS vulnerability in theme config file in Mautic
Medium
CVE-2018-11198
XSS vulnerability in Author URL of themes in Mautic
Medium
CVE-2017-1000490
Mautic users able to download any files from server using filemanager
Critical
CVE-2020-35124
XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
High
CVE-2021-21263
Query Binding Exploitation
Medium
CVE-2020-26253
Kirby .dev domains and some reverse proxy setups were treated as local
Medium
CVE-2024-21911
Cross-site scripting vulnerability in TinyMCE
Low
ghsa-8pfh-mm2g-hmc3
Authenticated Server Side Request Forgery
Low
ghsa-cq6h-w3mc-57f4
Information exposure via query strings in URL
Low
ghsa-5q58-x5h2-v5rx
Authenticated Privilege Escalation
Medium
CVE-2020-26227
Cross-Site Scripting in Fluid view helpers
Medium
CVE-2020-37256
Cross-Site Scripting in Grav
Medium
CVE-2020-26255
Kirby Panel users could upload PHP Phar archives as content files before v2.5.14 and v3.4.5
High
CVE-2020-28948
Drupal core - SA-CORE-2020-013
Low
CVE-2020-26229
XML External Entity in Dashboard Widget
High
CVE-2020-26228
Cleartext storage of session identifier
Low
CVE-2020-26231
Bypass of fix for CVE-2020-15247, Twig sandbox escape
Medium
CVE-2020-15247
Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.
High
CVE-2020-15246
Local File Inclusion by unauthenticated users
Low
CVE-2020-15249
Stored XSS by authenticated backend user with access to upload files
Low
CVE-2020-15248
Privilege escalation by backend users assigned to the default "Publisher" system role
High
CVE-2020-26216
Cross-Site Scripting through Fluid view helper arguments
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.