Medium
CVE-2022-47136
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-23720
Verified Reviews (Avis Vérifiés) <= 2.3.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23709
WPJAM Basic <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30868
CMS Tree Page View <= 1.6.7 - Reflected Cross-Site Scripting via 'post_type'
Critical
CVE-2023-26865
Improper neutralization of a SQL parameter in bdroppy module for PrestaShop
Critical
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Medium
CVE-2023-29922
PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
Medium
CVE-2023-20862
Spring Security logout not clearing security context
High
CVE-2023-30797
Lemur subject to insecure random generation
Medium
CVE-2023-22893
Strapi does not verify the access or ID tokens issued during the OAuth flow
Critical
CVE-2023-29510
Code injection via unescaped translations in xwiki-platform
Medium
CVE-2023-26048
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Critical
CVE-2023-31250
Drupal core - SA-CORE-2023-005
Medium
CVE-2023-29923
PowerJob vulnerable to Insecure Permissions
Medium
CVE-2023-29921
PowerJob Incorrect Access Control vulnerability
Medium
CVE-2023-2184
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-47140
ARMember <= 4.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-47137
Ninja Tables <= 4.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Critical
CVE-2022-4774
Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Medium
CVE-2023-25460
Easy Ad Manager <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0892
BizLibrary <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-22706
PropertyHive <= 1.5.48 - Reflected Cross-Site Scripting via date_post_id
Medium
CVE-2022-47178
Simple Share Buttons Adder <= 8.4.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.