Cross-site Scripting

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script.CVE-2020-9390Squaredup · 0.9% likely

   CWE-79

2. A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modific…CVE-2021-40096Squaredup · 0.8% likely

   CWE-79

3. A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboa…CVE-2021-40093Squaredup · 0.6% likely

   CWE-79

4. A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.CVE-2021-40092Squaredup · 0.6% likely

   CWE-79

5. A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's devic…CVE-2021-40094Squaredup · 0.5% likely

   CWE-79

6. SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).CVE-2022-46785Squaredup · 0.4% likely

   CWE-79

7. SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).CVE-2022-46786Squaredup · 0.4% likely

   CWE-79

8. SquaredUp DS for SCOM 6.2.1.11104 allows XSS.CVE-2024-45180Squaredup · CVSS 5.4 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.