Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 121
Reset filtersStored cross site scripting via container name
Stored cross site scripting on saved presets
Stored cross site scripting on tags
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Concrete CMS vulnerable to cross-site scripting in the text input field
Concrete CMS vulnerable to Reflected Cross-site Scripting
Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS
Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons
Concrete CMS vulnerable to Cross-site Scripting via multilingual report
Concrete CMS vulnerable to Cross-site Scripting
Concrete CMS vulnerable to Session Fixation
Concrete CMS vulnerable to Improper Authentication
Concrete CMS vulnerable to XML External Entity
Concrete CMS vulnerable to Cross-site Request Forgery
Concrete CMS Cross-site Scripting via Survey Blocks
concrete5 vulnerable to Cross-site Scripting
Concrete5 Vulnerable to Cross-Site Scripting (XSS)
Concrete CMS vulnerable to cross-site scripting (XSS)
Cross Site Request Forgery in concrete5/concrete5
Unrestricted Uploads in Concrete5
Unrestricted Uploads in Concrete5
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.