CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/05/2024 |
| CVE-2020-13870 | 보통5.4 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name. | 05/06/2020 |
| CVE-2020-13869 | 보통5.4 | An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. | 05/06/2020 |
| CVE-2020-13868 | 보통6.5 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. | 05/06/2020 |
| CVE-2020-13486 | 보통6.1 | The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. | 25/05/2020 |
| CVE-2020-13485 | 심각9.1 | The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header. | 25/05/2020 |
| CVE-2020-13459 | 보통5.4 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action. | 25/05/2020 |
| CVE-2020-13458 | 높음8.8 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action. | 25/05/2020 |