formwork

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Formwork has a Cross-site scripting (XSS) vulnerability in Description metadataCVE-2024-37160getformwork · CVSS 4.8 · 0.5% likely

   CWE-79

2. Formwork Improperly Manages Privileges During User CreationCVE-2026-27198getformwork · CVSS 8.8 · 0.5% likely

   CWE-269

3. Formwork < 2.3.11 Stored XSS via Referer HeaderCVE-2026-82451getformwork · CVSS 6.1 · 0.4% likely

   CWE-79

4. Formwork before 2.3.13 Path Traversal via BackupController Download and DeleteCVE-2026-104478getformwork · CVSS 7.1 · 0.4% likely

   CWE-22

5. getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scriptingCVE-2026-105950getformwork · CVSS 3.5 · 0.3% likely

   CWE-79

6. Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog TagsCVE-2025-65956getformwork · CVSS 6.5 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.