CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/05/2024 |
| CVE-2020-13870 | MEDIUM5.4 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name. | 05/06/2020 |
| CVE-2020-13869 | MEDIUM5.4 | An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. | 05/06/2020 |
| CVE-2020-13868 | MEDIUM6.5 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. | 05/06/2020 |
| CVE-2020-13486 | MEDIUM6.1 | The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. | 25/05/2020 |
| CVE-2020-13485 | CRITICAL9.1 | The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header. | 25/05/2020 |
| CVE-2020-13459 | MEDIUM5.4 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action. | 25/05/2020 |
| CVE-2020-13458 | HIGH8.8 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action. | 25/05/2020 |