connection · two weakness classes
Open Redirect with Cross-site Scripting
44 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE whose record names a weakness from both classes, neither being the other's parent in the CWE hierarchy: this is what the line between them on the dial stands for.
- check available
- 4
- likely to be exploited
- 1
Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.
- Grafana - XSS / Open Redirect / SSRF via Client Path Traversal
- Apache Druid - Server-Side Request Forgery
- Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect
- Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting
- An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redir…
- The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.
- In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.
- XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable.
- The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
- Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.
- TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box.
- An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page.
- An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL ma…
- svg-sanitizer By-Passing Attribute Sanitization
- Anubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons
- DOM-Based XSS in Ory Polis Login Page
- Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode
- smartbanner.js rel noopener XSS vulnerability
- Unblu Spark Open Redirect leading to DOM-Based XSS
- Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66
- React Router: Open redirect can lead to XSS
- Plane Vulnerable to Cross-Site Scripting via Open Redirect in ?next_path Parameter
- immich: One-click account takeover via XSS in login page continue redirect
- TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
- FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS
- CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.