Medium
ghsa-9jp8-cwwx-p64q
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
ghsa-fxwm-rx68-p5vx
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext
Medium
CVE-2021-25987
Hexo Vulnerable to XSS
Medium
CVE-2021-4026
bookstack is vulnerable to Improper Access Control
Medium
CVE-2021-25967
Cross-site Scripting in CKAN
High
CVE-2021-3994
django-helpdesk is vulnerable to Cross-site Scripting
Medium
CVE-2021-22095
Deserialization of Untrusted Data in Spring AMQP
Medium
CVE-2021-25021
OMGF <= 4.5.11 - Authenticated (Admin+) Arbitrary Folder Deletion via Path Traversal
Medium
CVE-2021-42367
Variation Swatches for WooCommerce <= 2.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2021-25000
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in General Module
Medium
CVE-2021-24680
WP Travel Engine <= 5.3.0 - Editor+ Stored Cross-Site Scripting
Medium
CVE-2021-24999
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in PDF Invoicing Module
Medium
CVE-2021-25001
Booster for WooCommerce <= 5.4.8 - Reflected Cross-Site Scripting in Product XML Feeds Module
Medium
CVE-2021-25020
CAOS <= 4.1.8 - Admin+ Arbitrary Folder Deletion via Path Traversal
Critical
CVE-2021-43786
API token verification can be bypassed in NodeBB
Critical
CVE-2021-43787
XSS via prototype pollution in NodeBB
Medium
CVE-2021-43788
NodeBB vulnerable to path traversal in translator module
Medium
d4ba4365-449e-4271-b46e-7f149efc752c
Video Conferencing with Zoom < 3.8.16 - Reflected Cross-Site Scripting
Medium
CVE-2021-24964
LiteSpeed Cache <= 4.4.3 - Authorization Bypass
Medium
CVE-2021-24963
LiteSpeed Cache <= 4.4.3 - Reflected Cross-Site Scripting via qc_res
Critical
CVE-2021-44140
Incorrect Default Permissions in Apache JSPWiki
High
CVE-2021-42358
Contact Form With Captcha <= 1.6.7 - Cross-Site Request Forgery
Medium
CVE-2021-32061
S3Scanner allows Directory Traversal
Medium
CVE-2021-25006
MOLIE – Instructure Canvas Linking tool <= 0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.