Layerbb

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).CVE-2018-17997Layerbb · 3.6% likely

   CWE-79

2. LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/.CVE-2018-17996Layerbb · 3.0% likely

   CWE-352

3. LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.CVE-2019-16531Layerbb · 2.5% likely

   CWE-352

4. LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.CVE-2018-17988Layerbb · 2.0% likely

   CWE-89

5. LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used.CVE-2019-13973Layerbb · 1.8% likely

   CWE-434

6. LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997.CVE-2019-13972Layerbb · 0.9% likely

   CWE-79

7. LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.CVE-2019-13974Layerbb · 0.6% likely

   CWE-352

8. LayerBB 1.1.4 SQL Injection via search_query ParameterCVE-2021-47954LayerBB · CVSS 8.2 · 0.2% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.