Medium
CVE-2025-1517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Low
CVE-2025-27146
Matrix IRC Bridge allows IRC command injection to own puppeted user
High
CVE-2025-27108
DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace
High
CVE-2025-27109
Solid Lacks Escaping of HTML in JSX Fragments allows for Cross-Site Scripting (XSS)
Critical
CVE-2023-25574
LTI JupyterHub Authenticator does not properly validate JWT Signature
Medium
CVE-2024-12434
SureMembers <= 1.10.6 - Sensitive Information Exposure
Medium
CVE-2024-11189
Social Share And Social Locker – ARSocial <= 1.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13803
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10149
Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-26530
Moodle allows reflected XSS via question bank filter
High
CVE-2025-26529
Moodle has a stored XSS risk in admin live log
Medium
CVE-2025-26526
Moodle's feedback response viewing and deletions did not respect Separate Groups mode
High
CVE-2025-26525
Moodle has an arbitrary file read risk through pdfTeX
Medium
CVE-2025-26527
Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block
Low
CVE-2025-26528
Moodle has a stored XSS in ddimageortext question type
High
CVE-2025-26533
Moodle has a SQL injection risk in course search module list filter
Low
CVE-2025-26531
Moodle has an IDOR in badges allows disabling of arbitrary badges
Low
CVE-2025-26532
Moodle allows teachers to evade trusttext config when restoring glossary entries
High
CVE-2025-71403
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
Medium
CVE-2025-27143
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
Medium
CVE-2025-27317
RAYS Grid <= 1.3.1 - Cross-Site Request Forgery
Medium
CVE-2025-26883
Animated Text Block <= 1.0.7 - Missing Authorization
Medium
CVE-2025-27316
JPG, PNG Compression and Optimization <= 1.7.35 - Cross-Site Request Forgery
Medium
CVE-2025-26972
Private Content <= 8.11.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.