Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,345

Newly disclosed

Feed last synced

52 mins ago

Data freshness

Showing 7891–7920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-1908	medium	6.3/10	SourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injection	Apr 6, 2023 3y ago
CVE-2013-10022	low	3.5/10	BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting	Apr 5, 2023 3y ago
CVE-2023-1858	medium	4.3/10	SourceCodester Earnings and Expense Tracker App index.php information disclosure	Apr 5, 2023 3y ago
CVE-2023-1856	medium	6.3/10	SourceCodester Air Cargo Management System GET Parameter track_shipment.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1853	low	3.5/10	SourceCodester Online Payroll System employee_edit.php cross site scripting	Apr 5, 2023 3y ago
CVE-2023-1852	low	3.5/10	SourceCodester Online Payroll System deduction_edit.php cross site scripting	Apr 5, 2023 3y ago
CVE-2023-1851	low	3.5/10	SourceCodester Online Payroll System employee_add.php cross site scripting	Apr 5, 2023 3y ago
CVE-2023-1850	medium	6.3/10	SourceCodester Online Payroll System login.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1849	medium	6.3/10	SourceCodester Online Payroll System cashadvance_row.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1848	medium	6.3/10	SourceCodester Online Payroll System attendance_row.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1847	medium	6.3/10	SourceCodester Online Payroll System attendance.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1846	medium	6.3/10	SourceCodester Online Payroll System deduction_row.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1845	medium	6.3/10	SourceCodester Online Payroll System employee_row.php sql injection	Apr 5, 2023 3y ago
CVE-2023-1887	high	8.3/10	Business Logic Errors in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1886	high	7.3/10	Authentication Bypass by Capture-replay in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1885	medium	6.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1884	medium	4.7/10	Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1883	medium	5.4/10	Improper Access Control in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1882	high	8.1/10	Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1880	high	8.3/10	Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1879	medium	4.7/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1878	high	8.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1758	high	8.9/10	Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1757	high	8.1/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1756	medium	4.7/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Apr 5, 2023 3y ago
CVE-2023-1827	medium	6.3/10	SourceCodester Centralized Covid Vaccination Records System GET Parameter manage_location.php sql injection	Apr 4, 2023 3y ago
CVE-2023-1826	medium	6.3/10	SourceCodester Online Computer and Laptop Store index.php unrestricted upload	Apr 4, 2023 3y ago
CVE-2023-28854	high	8.0/10	nophp vulnerable to shell command injection on httpd user when sending a password-setting mail or mail-login mail	Apr 3, 2023 3y ago
CVE-2023-1799	low	3.5/10	EyouCMS login.php cross site scripting	Apr 2, 2023 3y ago
CVE-2023-1798	low	3.5/10	EyouCMS login.php cross site scripting	Apr 2, 2023 3y ago