Cross-site Scripting

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution b…CVE-2021-44082Textpattern · 3.0% likely

   CWE-79

2. Cross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to setup/index.php.CVE-2014-4737Textpattern · 1.9% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web s…CVE-2011-5019Textpattern · 1.5% likely

   CWE-79

4. Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to setup…CVE-2008-5668Textpattern · 1.1% likely

   CWE-79

5. A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a craf…CVE-2021-28002Textpattern · 1.1% likely

   CWE-79

6. A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payloa…CVE-2021-28001Textpattern · 1.0% likely

   CWE-79

7. Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or H…CVE-2008-5757Textpattern · 0.9% likely

   CWE-79

8. Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.CVE-2021-40658Textpattern · 0.6% likely

   CWE-79

9. Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.CVE-2020-35854Textpattern · 0.6% likely

   CWE-79

10. Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature.CVE-2020-23239Textpattern · 0.5% likely

    CWE-79

11. Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed InjectionCVE-2026-32986Textpattern · CVSS 6.1 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.