Cross-site Scripting

Every one of the 260 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004CVE-2019-6341Drupal · 12% likely

   CWE-79

2. Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versio…CVE-2020-13666Drupal · 2.9% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject a…CVE-2015-6665Drupal · 2.7% likely

   CWE-79

4. Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML vi…CVE-2015-6658Drupal · 2.5% likely

   CWE-79

5. Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging…CVE-2008-3218Drupal · 2.5% likely

   CWE-79

6. Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vect…CVE-2012-2298Drupal · 2.4% likely

   CWE-79

7. Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web s…CVE-2012-1646Drupal · 2.4% likely

   CWE-79

8. The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) atta…CVE-2008-1133Drupal · 2.3% likely

   CWE-79

9. Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remote attackers to conduct cross-site scripting (XSS) attacks v…CVE-2008-0273Drupal · 2.3% likely

   CWE-79

10. Multiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified pa…CVE-2007-0136Drupal · 2.2% likely

    CWE-79

11. Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows rem…CVE-2013-0244Drupal · 2.1% likely

    CWE-79

12. The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack…CVE-2008-3219Drupal · 2.1% likely

    CWE-79

13. Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows r…CVE-2008-6533Drupal · 2.0% likely

    CWE-79

14. Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web script or HTML via vectors related to CSS.CVE-2013-6388Drupal · 1.8% likely

    CWE-79

15. Cross-site scripting (XSS) vulnerability in the Modal Frame API module 6.x-1.x before 6.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspeci…CVE-2014-8296Drupal · 1.8% likely

    CWE-79

16. Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2009-2373Drupal · 1.8% likely

    CWE-79

17. Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified ve…CVE-2012-2339Drupal · 1.7% likely

    CWE-79

18. The core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension on a whitelist, which allows remote attackers to conduct cross-site scripting (XS…CVE-2007-5596Drupal · 1.6% likely

    CWE-79

19. Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script o…CVE-2009-1575Drupal · 1.6% likely

    CWE-79

20. Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permis…CVE-2008-6170Drupal · 1.6% likely

    CWE-79

21. Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote attackers to inject arbitrary web script or HTML via unspe…CVE-2008-3740Drupal · 1.6% likely

    CWE-79

22. Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML v…CVE-2008-0274Drupal · 1.5% likely

    CWE-79

23. Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) in Taxonomy Theme module before 5.x-1.2, a module for Drupal…CVE-2009-0818Drupal · 1.5% likely

    CWE-79

24. Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.CVE-2016-7571Drupal · 1.5% likely

    CWE-79

25. Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or…CVE-2013-6387Drupal · 1.4% likely

    CWE-79

26. Cross-site scripting (XSS) vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permissio…CVE-2014-8744Drupal · 1.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.