Cross-site Scripting

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter…CVE-2012-2932Tinywebgallery · 1.2% likely

   CWE-79

2. Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php, (2…CVE-2007-4958Tinywebgallery · 1.0% likely

   CWE-79

3. Advanced iFrame < 2022 - Reflected Cross-Site ScriptingCVE-2021-24953Tinywebgallery · 0.8% likely

   CWE-79

4. In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote attackers with low-privilege user accou…CVE-2017-16635Tinywebgallery · 0.8% likely

   CWE-79

5. TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name ParameterCVE-2023-53939TinyWebGallery · CVSS 5.4 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.