Cross-site Scripting

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.CVE-2018-5950Gnu · 4.6% likely

   CWE-79

2. Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f…CVE-2011-0707Gnu · 4.2% likely

   CWE-79

3. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors,…CVE-2020-12137Gnu · 2.3% likely

   CWE-79

4. Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (…CVE-2010-3089Gnu · 2.0% likely

   CWE-79

5. In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.CVE-2021-43331Gnu · 1.4% likely

   CWE-79

6. Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via t…CVE-2011-5024Gnu · 1.0% likely

   CWE-79

7. An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag allows (with authentication) injecting arbitrary JavaScript into any forum message.CVE-2021-28968Gnu · 0.5% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.