Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,583
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
TYPO3 Cross-Site Scripting in Filelist Module
mysql2 vulnerable to Prototype Pollution
TYPO3 Cross-Site Scripting in Link Handling
TYPO3 Cross-Site Scripting in Form Framework validation handling
TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
TYPO3 Broken Access Control in Import Module
TYPO3 Security Misconfiguration in Frontend Session Handling
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
TYPO3 Information Disclosure in Backend User Interface
TYPO3 Information Disclosure in User Authentication
TYPO3 Disclosure of Information about Installed Extensions
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
TYPO3 Information Disclosure in Page Tree
TYPO3 Security Misconfiguration in User Session Handling
TYPO3 Cross-Site Scripting in Form Framework
TYPO3 Cross-Site Scripting in Language Pack Handling
TYPO3 Arbitrary Code Execution via File List Module
TYPO3 Broken Access Control in Localization Handling
TYPO3 Cross-Site Scripting in Fluid ViewHelpers
TYPO3 Security Misconfiguration for Backend User Accounts
TYPO3 Denial of Service in Frontend Record Registration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.