Lightcms

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.CVE-2021-3355Lightcms Project · 7.2% likely

   CWE-79

2. LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images.CVE-2021-27112Lightcms Project · 2.4% likely
3. LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.CVE-2023-27060Lightcms Project · CVSS 9.8 · 1.3% likely

   CWE-306

4. A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.CVE-2022-33009Lightcms Project · 0.5% likely

   CWE-79

5. LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.CVE-2024-22559Lightcms Project · CVSS 5.4 · 0.3% likely

   CWE-79

6. A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of the user's b…CVE-2026-29934Lightcms Project · CVSS 6.1 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.