Medium
CVE-2023-1427
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-28618
Enhanced Plugin Admin <= 1.16 - Cross-Site Request Forgery via epa_options_page
Medium
CVE-2023-24372
Simple Custom Author Profiles <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23732
Disqus Conditional Load <= 11.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings.
High
CVE-2023-27459
User Registration <= 2.3.2.1 - PHP Object Injection
Medium
CVE-2023-28689
JS Job Manager <= 2.0.0 - Missing Authorization
Medium
CVE-2023-23733
Lazy Social Comments <= 2.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2023-23647
Team Member <= 4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via new_style_name
Medium
CVE-2023-28695
VigilanTor <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23862
Vertical scroll recent post <= 14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-1331
Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin Reset
Medium
CVE-2023-23734
Userlike <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-27637
[CVE-2023-27638][CWE-89] Improper neutralization of SQL parameters in module PrestaShop Custom Product Designer (tshirtecommerce) for PrestaShop
High
CVE-2023-28118
kaml has potential denial of service while parsing input with anchors and aliases
High
CVE-2023-28426
SVG Sanitizer library <= 0.15.4 - Cross-Site Scripting Bypass
Medium
CVE-2023-28429
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Medium
CVE-2023-1515
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Medium
CVE-2023-1517
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
High
CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external resources
High
CVE-2023-26513
Apache Sling Resource Merger has Excessive Iteration vulnerability
Medium
CVE-2023-23863
TreePress – Easy Family Trees & Ancestor Profiles <= 2.0.22 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'post_title' parameter
Medium
f3944b2d-c431-4a53-b4e2-740480e746d6
Cyberus Key <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0893
Time Sheets <= 1.29.2 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1478
Hummingbird <= 3.4.1 - Unauthenticated Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.