Cross-site Scripting

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to ap…CVE-2013-3484Dotcms · 1.9% likely

   CWE-79

2. dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter. (This…CVE-2022-35740Dotcms · CVSS 6.1 · 1.5% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. NOTE: t…CVE-2008-2397Dotcms · 1.0% likely

   CWE-79

4. /servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.CVE-2019-11846Dotcms · 1.0% likely

   CWE-79

5. XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter.CVE-2017-5877Dotcms · 0.9% likely

   CWE-79

6. XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.CVE-2017-5876Dotcms · 0.9% likely

   CWE-79

7. dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.CVE-2018-16980Dotcms · 0.8% likely

   CWE-79

8. Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAd…CVE-2020-17542Dotcms · 0.8% likely

   CWE-79

9. dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.CVE-2017-6003Dotcms · 0.8% likely

   CWE-79

10. A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. This occurs in the admin portal when the configuration has XSS_PROTECTION_ENABLED=false.…CVE-2022-37431Dotcms · 0.7% likely

    CWE-79

11. Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/po…CVE-2016-3971Dotcms · 0.7% likely

    CWE-79

12. DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An attacker could compromise the security of a website or web appli…CVE-2020-35274Dotcms · 0.6% likely

    CWE-79

13. An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/image_tool.jsp.CVE-2018-19554Dotcms · 0.6% likely

    CWE-79

14. A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload.CVE-2021-35361Dotcms · 0.6% likely

    CWE-79

15. A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload.CVE-2021-35360Dotcms · 0.6% likely

    CWE-79

16. XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.CVE-2017-5875Dotcms · 0.6% likely

    CWE-79

17. The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description fi…CVE-2017-15219Dotcms · 0.5% likely

    CWE-79

18. A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted…CVE-2021-35358Dotcms · 0.5% likely

    CWE-79

19. CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8CVE-2023-3042dotCMS · CVSS 5.3 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.