Cross-site Scripting

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web…CVE-2014-3840Mayan-Edms · 3.5% likely

   CWE-79

2. An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.CVE-2018-16405Mayan-Edms · 1.3% likely

   CWE-79

3. An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.CVE-2018-16406Mayan-Edms · 1.3% likely

   CWE-79

4. An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.CVE-2018-16407Mayan-Edms · 1.2% likely

   CWE-79

5. Mayan EDMS Tag XSSCVE-2022-47419Mayan EDMS · CVSS 5.4 · 0.5% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.