Cross-site Scripting

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Halo CMS - Stored Cross-Site Scripting (XSS) in Article's TagCVE-2022-22125halo-dev · CVSS 4.8 · 0.9% likely

   CWE-79

2. Halo Vulnerable to Stored XSS and RCE via File Upload BypassCVE-2024-56156halo-dev · CVSS 5.5 · 0.8% likely

   CWE-79

3. Halo CMS - Stored Cross-Site Scripting (XSS) in Profile ImageCVE-2022-22124halo-dev · CVSS 5.4 · 0.7% likely

   CWE-79

4. Halo CMS - Stored Cross-Site Scripting (XSS) in Article's TitleCVE-2022-22123halo-dev · CVSS 5.4 · 0.7% likely

   CWE-79

5. Halo's editor has a stored Cross-Site Scripting vulnerabilityCVE-2024-43792halo-dev · CVSS 6.3 · 0.4% likely

   CWE-79

6. Halo's editor has a stored XSS vulnerabilityCVE-2024-43793halo-dev · CVSS 6.3 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.