Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cross-site Scripting in ShowDoc
Cross-site Scripting in ShowDoc
Cross-site Scripting in Zenario CMS
Unrestricted Upload of File with Dangerous Type in Zenario CMS
Cross-site Scripting in showdoc/showdoc
Cross-site Scripting in ShowDoc
Command injection in libvcs and vcspull
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
Post Grid < 2.1.16 - Reflected Cross-Site Scripting
Post Grid <= 2.1.15 - Cross-Site Scripting
Sassy Social Share <= 3.3.39 - Reflected Cross-Site Scripting
Social Share, Social Login and Social Comments < 7.13.30 - Reflected Cross-Site Scripting
GridKit Portfolio <= 2.0.0 - Subscriber+ Stored Cross-Site Scripting
Inconsistent storage layout for ERC2771ContextUpgradeable
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Leaking of user information on Cross-Domain communication in sysend
Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius
Insufficient Session Expiration in Sylius
Sensitive Information Exposure in Sylius
Sudden swap of user auth tokens in Volto
Improper Restriction of Rendered UI Layers or Frames in Sylius
Page Builder KingComposer <= 2.9.6 - Authenticated Arbitrary Profile Creation and Stored Cross-Site Scripting
Members List Plugin <= 4.3.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.