Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filtersHAX CMS: Denial of Service using Malicious Import Request
HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack
Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover
HAXcms: Private Key Disclosure via Broken HMAC Implementation
HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft
HAXcms createSite SSRF Enables Arbitrary File Read
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
HAX CMS API Lacks Authorization Checks
HAX CMS application pages vulnerable to clickjacking
NodeJS version of the HAX CMS application is distributed with Default Secrets
HAX CMS NodeJS Application Has Improper Error Handling That Leads to Denial of Service
NodeJS version of HAX CMS Has Disabled Content Security Policy That Enables Cross-Site Scripting
NodeJS version of HAX CMS Has Insecure Default Configuration That Leads to Unauthenticated Access
HaxCMS-PHP Command Injection Vulnerability
@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.