Medium
CVE-2024-34443
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2024-5172
Expert Invoice <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4094
Simple Share Buttons Adder <= 8.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-6743
Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
Medium
CVE-2024-34444
Slider Revolution <= 6.6.20 - Missing Authorization
Medium
CVE-2024-5039
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
ghsa-vcg6-8fxc-x5cq
silverstripe/framework allows upload of dangerous file types
Medium
ghsa-crr3-h4m8-7f56
silverstripe/framework vulnerable to member disclosure in login form
Low
ghsa-vh7q-j8p5-2h4h
silverstripe/framework sends passwords back to browsers under some circumstances
Medium
ghsa-f43j-8hq4-2xj9
silverstripe/framework uploaded PHP script execution in assets
High
ghsa-vgxh-x8jv-hmff
silverstripe/framework code execution vulnerability
High
ghsa-m5q3-mvcr-gc5m
silverstripe/framework BackURL validation bypass with malformed URLs
Medium
ghsa-r3pr-fh25-wrfc
silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms
Medium
ghsa-xpff-c35g-j3cr
silverstripe/framework Privilege Escalation Risk in Member Edit form
Medium
ghsa-55qg-6c4m-mw6g
silverstripe/framework's URL parameters `isDev` and `isTest` unguarded
High
ghsa-xx4r-5265-48j6
silverstripe/framework SQL injection in full text search
Medium
ghsa-ph62-fv59-vf9h
silverstripe/framework users inadvertently passing sensitive data to LoginAttempt
High
ghsa-mqjc-x563-c9q8
silverstripe/framework CSV Excel Macro Injection
High
ghsa-7m2v-x7rg-5hm5
silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset forms
High
ghsa-4qx8-j9vh-2628
silverstripe/framework's User-Agent header not correctly invalidating user session
Medium
ghsa-c4c3-j73v-634r
silverstripe/framework has Cross-site Scripting vulnerability in page history comparison
Medium
ghsa-pp7q-6j3f-74vj
silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage
Medium
ghsa-r85g-7jpv-8xrx
silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL
Medium
ghsa-hhvj-mcrx-3vcf
silverstripe/framework has Cross-site Scripting vulnerability in page name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.