Cross-site Scripting

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML co…CVE-2020-22839B2evolution · 4.5% likely

   CWE-79

2. Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module.CVE-2020-22841B2evolution · 3.7% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in the filemanager in b2evolution before 5.2.1 allows remote attackers to inject arbitrary web script or HTML via the fm_filter parameter…CVE-2014-9599B2evolution · 2.2% likely

   CWE-79

4. Cross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes in the re…CVE-2007-0175B2evolution · 1.3% likely

   CWE-79

5. Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body.CVE-2012-5911B2evolution · 1.3% likely

   CWE-79

6. Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink functi…CVE-2016-7149B2evolution · 1.2% likely

   CWE-79

7. Cross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in b2evolution before 6.8.5 allows remote authenticated users to inject arbitrary web scri…CVE-2017-5553B2evolution · 1.2% likely

   CWE-79

8. Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML vi…CVE-2017-5494B2evolution · 1.2% likely

   CWE-79

9. Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name.CVE-2016-7150B2evolution · 0.9% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.