Cross-site Scripting

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. ZZcms - Cross-Site ScriptingCVE-2020-20285Zzcms · 1.4% likely

   CWE-79

2. Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php.CVE-2020-19042Zzcms · 0.9% likely

   CWE-79

3. XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.CVE-2018-17413Zzcms · 0.8% likely

   CWE-79

4. zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php.CVE-2018-14962Zzcms · 0.7% likely

   CWE-79

5. zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.CVE-2019-9078Zzcms · 0.6% likely

   CWE-79

6. An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /user/manage.php.CVE-2020-35973Zzcms · 0.6% likely

   CWE-79

7. ZZCMS URL register_nodb.php cross site scriptingCVE-2025-1949Zzcms · CVSS 4.3 · 0.5% likely

   CWE-79

8. An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in ad_manage.php.CVE-2021-46437Zzcms · 0.5% likely

   CWE-79

9. An issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in admin/ad_list.php.CVE-2022-44361Zzcms · CVSS 5.4 · 0.4% likely

   CWE-79

10. Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/…CVE-2024-44819Zzcms · CVSS 6.1 · 0.4% likely

    CWE-79

11. Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer header of the caina.php component.CVE-2024-44818Zzcms · CVSS 5.4 · 0.4% likely

    CWE-79

12. A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The application directly inserts the value of the HTTP_REFERER…CVE-2024-43009Zzcms · CVSS 4.7 · 0.4% likely

    CWE-79

13. A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers to execute arbitrary code in the context of a user's brows…CVE-2024-43005Zzcms · CVSS 4.7 · 0.3% likely

    CWE-79

14. ZZCMS msg.php cross site scriptingCVE-2024-11130Zzcms · CVSS 2.4 · 0.3% likely

    CWE-79

15. A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21. An attacker can exploit this vulnerability by sending a specially crafte…CVE-2024-43006Zzcms · CVSS 5.4 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.