CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/05/2024 |
| CVE-2020-13870 | 中危5.4 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name. | 05/06/2020 |
| CVE-2020-13869 | 中危5.4 | An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. | 05/06/2020 |
| CVE-2020-13868 | 中危6.5 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. | 05/06/2020 |
| CVE-2020-13486 | 中危6.1 | The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. | 25/05/2020 |
| CVE-2020-13485 | 严重9.1 | The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header. | 25/05/2020 |
| CVE-2020-13459 | 中危5.4 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action. | 25/05/2020 |
| CVE-2020-13458 | 高危8.8 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action. | 25/05/2020 |