Cross-site Scripting

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privileg…CVE-2022-36368IPFire Project · CVSS 4.8 · 0.9% likely

   CWE-79

2. An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries v…CVE-2020-19204Ipfire · 0.7% likely

   CWE-79

3. Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.CVE-2020-21142Ipfire · 0.7% likely

   CWE-79

4. An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 (x86_64) -…CVE-2020-19202Ipfire · 0.6% likely

   CWE-79

5. IPFire 2.21 Core Update 127 Cross-Site Scripting via ovpnmain.cgiCVE-2019-25398Ipfire · CVSS 6.1 · 0.3% likely

   CWE-79

6. IPFire 2.21 Core Update 127 Cross-Site Scripting via hosts.cgiCVE-2019-25397Ipfire · CVSS 6.1 · 0.3% likely

   CWE-79

7. IPFire 2.21 Core Update 127 Reflected XSS via updatexlrator.cgiCVE-2019-25396Ipfire · CVSS 6.1 · 0.3% likely

   CWE-79

8. IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tg…CVE-2025-50975Ipfire · CVSS 5.4 · 0.3% likely

   CWE-79

9. IPFire 2.21 Core Update 127 Stored XSS via extrahd.cgiCVE-2019-25399Ipfire · CVSS 6.4 · 0.3% likely

   CWE-79

10. IPFire 2.21 Core Update 127 Multiple XSS via fwhosts.cgiCVE-2019-25400Ipfire · CVSS 5.4 · 0.2% likely

    CWE-79

11. IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, resulting in a reflecte…CVE-2025-50976Ipfire · CVSS 6.1 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.