Cross-site Scripting

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.CVE-2021-39609Flatcore · 1.7% likely

   CWE-79

2. An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request body parameter for the acp interface. The…CVE-2021-23838Flatcore · 1.0% likely

   CWE-79

3. An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An a…CVE-2021-23836Flatcore · 0.9% likely

   CWE-79

4. flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifyin…CVE-2017-1000428Flatcore · 0.8% likely

   CWE-79

5. Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via the PATH_INFO in an acp.php URL, due t…CVE-2017-9451Flatcore · 0.7% likely

   CWE-79

6. FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections.CVE-2021-42245Flatcore · 0.7% likely

   CWE-79

7. flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/a…CVE-2020-17451Flatcore · 0.6% likely

   CWE-79

8. A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username text f…CVE-2022-43118Flatcore · CVSS 6.1 · 0.5% likely

   CWE-79

9. flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.CVE-2021-40902Flatcore · 0.5% likely

   CWE-79

10. Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form.CVE-2021-40555Flatcore · CVSS 5.4 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.