Cross-site Scripting

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. NexusPHP <1.7.33 - Cross-Site ScriptingCVE-2022-46888Nexusphp · CVSS 6.1 · 1.6% likely

   CWE-79

2. A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the ti…CVE-2022-46889Nexusphp · CVSS 5.4 · 60% likely

   CWE-79

3. Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-si…CVE-2017-12792Nexusphp Project · 1.2% likely

   CWE-79

4. XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.CVE-2017-15305Nexusphp Project · 0.9% likely

   CWE-79

5. Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_…CVE-2017-12906Nexusphp Project · 0.8% likely

   CWE-79

6. NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.CVE-2017-14347Nexusphp Project · 0.7% likely

   CWE-79

7. Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.CVE-2017-12680Nexusphp Project · 0.7% likely

   CWE-79

8. NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.CVE-2017-11651Nexusphp · 0.7% likely

   CWE-79

9. Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.CVE-2017-14534Nexusphp Project · 0.7% likely

   CWE-79

10. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.CVE-2017-12907Nexusphp Project · 0.7% likely

    CWE-79

11. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.CVE-2017-12798Nexusphp Project · 0.7% likely

    CWE-79

12. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.CVE-2017-12655Nexusphp Project · 0.7% likely

    CWE-79

13. Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF.CVE-2017-14070Nexusphp · 0.6% likely

    CWE-79

14. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.CVE-2017-12777Nexusphp Project · 0.6% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.