Cross-site Scripting

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. Angular Comment cross site scriptingCVE-2021-4231Angular · CVSS 3.5 · 1.2% likely

   CWE-79

2. Angular i18n vulnerable to Cross-Site Scripting (XSS)CVE-2026-27970angular · CVSS 7.1 · 0.5% likely

   CWE-79

3. Angular has XSS in i18n attribute bindingsCVE-2026-32635@angular · CVSS 8.6 · 0.5% likely

   CWE-79

4. Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service ExtensionCVE-2026-50178angular · CVSS 8.7 · 0.5% likely

   CWE-79

5. Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)CVE-2026-52725angular · CVSS 5.3 · 0.5% likely

   CWE-79

6. Angular has XSS Vulnerability via Unsanitized SVG Script AttributesCVE-2026-22610angular · CVSS 8.5 · 0.4% likelycovered by CyberSIXT

   CWE-79

7. Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)CVE-2026-69149angular · CVSS 8.6 · 0.4% likely

   CWE-79

8. Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSRCVE-2026-50556angular · CVSS 8.1 · 0.4% likely

   CWE-79

9. Angular: Template and Attribute Namespace Sanitization Bypass (XSS)CVE-2026-50557angular · CVSS 5.3 · 0.4% likely

   CWE-79

10. Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML AttributesCVE-2025-66412angular · CVSS 8.5 · 0.4% likely

    CWE-79

11. Angular Client Hydration DOM Clobbering & Response-Cache PoisoningCVE-2026-54267angular · CVSS 8.6 · 0.4% likely

    CWE-79

12. Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilerCVE-2026-88057angular · CVSS 5.3 · 0.4% likely

    CWE-79

13. Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content ElementsCVE-2026-88060angular · CVSS 8.6 · 0.4% likely

    CWE-79

14. Angular: Two-Way Property Binding Sanitization Bypass (XSS)CVE-2026-54265angular · CVSS 5.3 · 0.3% likely

    CWE-79

15. Angular i18n: Cross-Site Scripting (XSS) via event-handler attributesCVE-2026-69151angular · CVSS 7.6 · 0.3% likely

    CWE-79

16. A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via inject…CVE-2025-61261Angular · CVSS 5.4 · 0.3% likely

    CWE-79

17. Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content ElementsCVE-2026-88058angular · CVSS 8.6 · 0.3% likely

    CWE-79

18. Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-serverCVE-2026-50555angular · CVSS 8.6 · 0.3% likely

    CWE-79

19. Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code ExtensionCVE-2026-49241angular · CVSS 8.7 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.