Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Watu Quiz <= 3.3.9.2 - Reflected Cross-Site Scripting via 'question'
Simple Popup Images <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Newsletters <= 4.8.8 - Cross-Site Request Forgery
Improper neutralization of SQL parameter in leurlrewrite for PrestaShop
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
vm2 Sandbox Escape vulnerability
Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
xwiki-platform-administration-ui vulnerable to privilege escalation
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site Scripting
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpoints
org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-logging-ui Eval Injection vulnerability
xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.