Cross-site Scripting

Every one of the 292 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache OFBiz 17.12.03 - Cross-Site ScriptingCVE-2020-9496Apache · 99% likely

   CWE-79

2. Apache OFBiz <=16.11.07 - Cross-Site ScriptingCVE-2020-1943Apache · 97% likely

   CWE-79

3. Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site ScriptingCVE-2019-10092Apache · 81% likely

   CWE-79

4. Apache Tomcat - Cross-Site ScriptingCVE-2019-0221Apache · 58% likely

   CWE-791 bounty report

5. Apache ActiveMQ <=5.15.5 - Cross-Site ScriptingCVE-2018-8006Apache Software Foundation · 56% likely

   CWE-79

6. Apache Tomcat Examples Web Application - Cross-Site ScriptingCVE-2022-34305Apache Software Foundation · 6.7% likely

   CWE-79

7. Apache Tomcat - Cross-Site ScriptingCVE-2026-50229Apache Software Foundation · CVSS 6.1 · 4.1% likely

   CWE-80

8. http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not…CVE-2006-3918Apache · 95% likely

   CWE-79

9. Apache Superset stored XSS on Dashboard markdownCVE-2021-27907Apache Software Foundation · 86% likely

   CWE-79

10. Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jspCVE-2022-28730Apache Software Foundation · 86% likely

    CWE-79

11. XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2CVE-2022-27166Apache Software Foundation · 86% likely

    CWE-79

12. Apache JSPWiki Cross-site scripting vulnerability on WeblogPluginCVE-2022-28732Apache Software Foundation · 83% likely

    CWE-79

13. Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error mess…CVE-2007-6203Apache · 81% likely

    CWE-79

14. An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.1…CVE-2020-13947Apache · 79% likely

    CWE-79

15. Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page…CVE-2007-6388Apache · 76% likely

    CWE-79

16. Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web scri…CVE-2008-1232Apache · 76% likely

    CWE-79

17. Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitr…CVE-2005-3352Apache · 74% likely

    CWE-79

18. Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.…CVE-2006-7196Apache · 72% likely

    CWE-79

19. Apache OFBiz: Stored XSS VulnerabilityCVE-2025-30676Apache Software Foundation · CVSS 6.1 · 68% likely

    CWE-80

20. Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and…CVE-2008-0455Apache · 65% likely

    CWE-79

21. Apache JSPWiki: Cross-site scripting vulnerability on upload pageCVE-2024-27136Apache Software Foundation · CVSS 6.1 · 61% likely

    CWE-79

22. Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web…CVE-2007-3386Apache · 59% likely

    CWE-79

23. Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastNam…CVE-2012-1006Apache · 57% likely

    CWE-79

24. Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly ha…CVE-2008-2168Apache · 55% likely

    CWE-79

25. Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the…CVE-2007-5000Apache · 47% likely

    CWE-79

26. Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbi…CVE-2010-4172Apache · 42% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.