High
ghsa-j9wr-49vq-rm5g
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-24274
Ultimate Maps by Supsystic <= 1.2.4 - Reflected Cross-Site scripting
Medium
CVE-2021-31693
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting <= 1.5.68 - Reflected Cross-Site Scripting
Medium
CVE-2021-24291
Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting
Medium
CVE-2021-46889
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting
Medium
CVE-2021-24276
Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting
Medium
CVE-2021-24275
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting
High
CVE-2021-29440
Grav's Twig processing allowing dangerous PHP functions by default
Medium
CVE-2021-29438
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
Medium
CVE-2024-0758
JavaScript execution via malicious molfiles (XSS)
Critical
CVE-2021-30246
RSA signature validation vulnerability on maleable encoded message in jsrsasign
High
CVE-2021-24324
404 SEO Redirection <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2021-24326
All 404 Redirect to Homepage < 1.21 - Reflected Cross-Site Scripting via tab Parameter
Medium
CVE-2021-24325
404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24327
SEO Redirection <= 6.4 - Authenticated Stored Cross-Site Scripting
Medium
0a6b87a8-2ebf-4db6-bf09-e9642708b2aa
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.10.2 - Cross-Site Request Forgery
Medium
06738434-ccd4-4e87-8163-d56ff3b4b5c8
Download Manager <= 3.1.17 - Missing Authorization
Medium
CVE-2021-29432
Malicious users could abuse Sydent to control the content of invitation emails
Medium
CVE-2021-29431
SSRF in Sydent due to missing validation of hostnames
High
CVE-2021-29430
Sydent vulnerable to denial of service attack via memory exhaustion
Medium
CVE-2021-29433
Sydent DoS (via resource exhaustion) due to improper input validation
Medium
CVE-2021-29450
WordPress Core < 5.7.1 - Sensitive Information Disclosure
High
CVE-2021-29447
WordPress Core < 5.7.1 - XXE Injection
Medium
CVE-2021-24273
Clever Addons for Elementor <=2.0.15 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.