Cross-site Scripting

Every one of the 60 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inje…CVE-2020-9371Codepeople · 3.3% likely

   CWE-79

2. Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress all…CVE-2015-7320Codepeople · 2.1% likely

   CWE-79

3. Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for Joo…CVE-2013-5953Codepeople · 1.9% likely

   CWE-79

4. Multiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2) cp_deleteMessageItem functions in cp_ppp_admin_int_message_list.inc.php in the Payment…CVE-2015-7666Codepeople · 1.8% likely

   CWE-79

5. The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.CVE-2016-10992Codepeople · 1.6% likely

   CWE-79

6. The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area."CVE-2019-9646Codepeople · 1.4% likely

   CWE-79

7. The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.CVE-2019-14791Codepeople · 1.4% likely

   CWE-79

8. The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authentic…CVE-2020-7228Codepeople · 1.0% likely

   CWE-79

9. The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.CVE-2019-14784Codepeople · 0.9% likely

   CWE-79

10. The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.CVE-2018-20963Codepeople · 0.9% likely

    CWE-79

11. The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.CVE-2016-10908Codepeople · 0.9% likely

    CWE-79

12. The cp-polls plugin before 1.0.5 for WordPress has XSS.CVE-2015-9346Codepeople · 0.9% likely

    CWE-79

13. The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.CVE-2014-10395Codepeople · 0.9% likely

    CWE-79

14. The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cp_contact_form_paypal.php&pwizard=1 cp_conta…CVE-2019-14785Codepeople · 0.8% likely

    CWE-79

15. Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment FormCVE-2022-4035codepeople · CVSS 7.2 · 0.8% likely

    CWE-79

16. Form Builder CP < 1.2.32 - Admin+ Stored Cross-Site ScriptingCVE-2022-2567Codepeople · 0.6% likely

    CWE-79

17. WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site ScriptingCVE-2022-0389Codepeople · 0.6% likely

    CWE-79

18. Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-2020codepeople · CVSS 7.2 · 0.6% likely

    CWE-79

19. Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site ScriptingCVE-2023-2718Codepeople · 0.5% likely

    CWE-79

20. Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-0963codepeople · CVSS 6.4 · 0.5% likely

    CWE-79

21. Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown FieldsCVE-2023-0389Codepeople · CVSS 4.8 · 0.5% likely

    CWE-79

22. Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site ScriptingCVE-2023-5955Codepeople · CVSS 6.1 · 0.5% likely

    CWE-79

23. WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-29759CodePeople · CVSS 7.1 · 0.4% likely

    CWE-79

24. WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerabilityCVE-2024-24874CodePeople · CVSS 5.3 · 0.4% likely

    CWE-80

25. WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)CVE-2023-36384CodePeople · CVSS 7.1 · 0.4% likely

    CWE-79

26. WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)CVE-2023-23971CodePeople · CVSS 5.9 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.