Medium
CVE-2023-2111
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-0733
Newsletter Popup <= 1.2 - Unauthenticted Stored Cross-Site Scripting via 'nl_data'
Medium
288853b8-7523-472e-8406-257ffb3bd5ea
WP-FormAssembly <= 2.0.8 - Limited Server Side Request Forgery via 'formassembly' shortcode
Medium
CVE-2023-0766
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Record Deletion
Medium
CVE-2023-2470
Add to Feedly <= 1.2.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2023-30282
Exposure of Private Personal Information to an Unauthorized Actor in SC Export Customers module for PrestaShop
High
CVE-2023-30860
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Medium
CVE-2023-29641
editor.md vulnerable to Cross-site Scripting
Medium
CVE-2022-45801
Apache StreamPark LDAP Injection vulnerability
Low
CVE-2023-30857
Possible prototype pollution in metadata record, when using meta decorator
Critical
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Medium
CVE-2023-2361
Cross-site Scripting (XSS) in pimcore
Medium
CVE-2023-1465
WP EasyPay <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-2256
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-2452
Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-2429
phpMyFAQ Improper Access Control vulnerability
Medium
CVE-2023-2428
phpMyFAQ vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-28477
Stored cross site scripting on API integration
Low
CVE-2023-28820
Stored cross site scripting in RSS displayer
Low
CVE-2023-28819
Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names
Medium
CVE-2023-28821
Missing rate limit for password resets
Medium
CVE-2023-28475
Reflected cross site scripting
Medium
CVE-2023-28472
Concrete CMS missing secure cookie parameters
Medium
CVE-2023-28471
Stored cross site scripting via container name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.