Cross-site Scripting

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)CVE-2026-102147Kiteworks · CVSS 9.3 · 0.5% likelycovered by CyberSIXT

   CWE-791 article

2. Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilityCVE-2026-28272kiteworks · CVSS 8.1 · 0.4% likely

   CWE-79

3. Kiteworks Core stored XSSCVE-2026-102100Kiteworks · CVSS 8.7 · 0.3% likely

   CWE-79

4. Kiteworks Core Stored Cross-site Scripting (XSS)CVE-2026-102126Kiteworks · CVSS 8.1 · 0.3% likely

   CWE-79

5. Kiteworks Core stored XSSCVE-2026-102092Kiteworks · CVSS 8.7 · 0.3% likely

   CWE-79

6. Kiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-24751kiteworks · CVSS 8.2 · 0.3% likely

   CWE-79

7. Kiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-24752kiteworks · CVSS 8.2 · 0.3% likely

   CWE-79

8. Kiteworks Secure Data Forms vulnerable to Cross-site ScriptingCVE-2026-24750kiteworks · CVSS 7.6 · 0.3% likely

   CWE-79

9. Kiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-24754kiteworks · CVSS 5.4 · 0.1% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.