Cross-site Scripting

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload i…CVE-2022-25582Classcms Project · 0.6% likely

   CWE-79

2. ClassCMS Model Management Page admin cross site scriptingCVE-2024-12503Classcms · CVSS 2.4 · 0.5% likely

   CWE-79

3. ClassCMS Article admin cross site scriptingCVE-2024-8145Classcms · CVSS 2.4 · 0.4% likely

   CWE-80

4. ClassCMS cross site scriptingCVE-2024-6932Classcms Project · CVSS 3.5 · 0.4% likely

   CWE-79

5. ClassCMS Logo admin cross site scriptingCVE-2024-8144Classcms · CVSS 3.5 · 0.4% likely

   CWE-79

6. ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.CVE-2024-57097Classcms · CVSS 4.8 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.