Medium
ghsa-97jm-g33h-f46g
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
ghsa-mpqj-f4v3-334h
Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter
Medium
ghsa-vj2j-6g3w-4662
Silverstripe Missing CSRF protection in login form
Critical
ghsa-8v6m-7f5v-hhx6
Silverstripe Brute force bypass on default admin
Medium
ghsa-m8v7-x398-pxrf
Silverstripe XSS in CMS Edit Page
Medium
ghsa-87pf-7x99-5xc4
Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers
Medium
ghsa-2hpc-mf4q-j885
Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter
Medium
ghsa-x5w2-wcr8-9q45
Silverstripe Missing security check on dev/build/defaults
Medium
CVE-2024-5060
LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor <= 1.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
ghsa-qp29-wcc2-vmpc
Silverstripe HtmlEditor embed url sanitisation
Medium
CVE-2024-0893
Schema App Structured Data <= 2.2.0 - Missing Authorization
Medium
CVE-2024-1376
Event post <= 5.9.4 - Missing Authorization
Medium
ghsa-j982-5jv7-v43r
Silverstripe Form field validation message XSS vulnerability
Medium
CVE-2024-1332
Custom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
ghsa-mqf5-275h-gf6r
Silverstripe framework is vulnerable to XSS in install.php
Medium
ghsa-g4hp-pfvf-vm5w
SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation
Medium
ghsa-hq4p-5mpr-jj9m
Silverstripe XSS in dev/build returnURL Parameter
Medium
ghsa-vp8p-c6xj-xpj7
Silverstripe External redirection risk in Security?ReturnURL
High
CVE-2024-0867
Email Log <= 2.4.8 - Unauthenticated Hook Injection
Medium
CVE-2024-1134
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
ghsa-25gq-jvx2-vg9x
Silverstripe X-Forwarded-Host request hostname injection
Medium
ghsa-jqp8-v74p-g8px
Silverstripe XSS in Director::force_redirect()
High
CVE-2024-1974
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-3557
WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.