Cross-site Scripting

Every one of the 78 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Reflected XSS - Telerik Reporting ModuleCVE-2017-9140Progress · 9.7% likely

   CWE-79

2. Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client d…CVE-2022-27665Progress · 33% likely

   CWE-79

3. In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute a…CVE-2021-41318Progress · 5.9% likely

   CWE-79

4. Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP s…CVE-2012-4344Progress · 3.8% likely

   CWE-79

5. In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute…CVE-2023-35759Progress · 2.1% likely

   CWE-79

6. An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticat…CVE-2020-12677Progress · 1.9% likely

   CWE-79

7. Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP OID object,…CVE-2015-6005Progress · 1.9% likely

   CWE-79

8. In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticate…CVE-2020-8612Progress · 1.7% likely

   CWE-79

9. In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application. If a victim within the MOVEit Transfer instance interacts with…CVE-2020-28647Progress · 1.5% likely

   CWE-79

10. In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to exec…CVE-2022-42711Progress · CVSS 9.6 · 1.4% likely

    CWE-79

11. Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.CVE-2023-27636Progress · CVSS 6.5 · 1.3% likely

    CWE-79

12. Cross-site scripting (XSS) vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because…CVE-2018-14037Progress · 1.2% likely

    CWE-79

13. Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/Li…CVE-2017-18639Progress · 0.9% likely

    CWE-79

14. WS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting VulnerabilityCVE-2023-40045Progress Software Corporation · CVSS 8.3 · 0.9% likely

    CWE-79

15. Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML vi…CVE-2018-17054Progress · 0.8% likely

    CWE-79

16. Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML vi…CVE-2018-17053Progress · 0.8% likely

    CWE-79

17. Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to inject arbitrary web script or HTML via u…CVE-2018-17056Progress · 0.8% likely

    CWE-79

18. In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in the administrative web interface. It is possible for a rem…CVE-2022-36967Progress · 0.8% likely

    CWE-79

19. Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1.CVE-2017-18177Progress · 0.7% likely

    CWE-79

20. Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1.CVE-2017-18176Progress · 0.7% likely

    CWE-79

21. Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixe…CVE-2017-18175Progress · 0.7% likely

    CWE-79

22. Cross-site scripting in Progress MarkLogic Server Query ConsoleCVE-2026-9195Progress Software Corporation · CVSS 9.3 · 0.7% likely

    CWE-79

23. MOVEit Transfer Reflected XSSCVE-2023-42656Progress Software Corporation · CVSS 6.1 · 0.6% likely

    CWE-79

24. WhatsUp Gold Stored Cross-Site Scripting (XSS) via RolesCVE-2023-6367Progress Software Corporation · CVSS 7.6 · 0.5% likely

    CWE-79

25. WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert CenterCVE-2023-6366Progress Software Corporation · CVSS 7.6 · 0.5% likely

    CWE-79

26. WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device GroupsCVE-2023-6365Progress Software Corporation · CVSS 7.6 · 0.5% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.