Zabbix Frontend Cross-Site Scripting Vulnerability (CNVD-2022-58412)

A cross-site scripting vulnerability exists in Zabbix Frontend, a monitoring software front-end tool from Zabbix U.S.A. The vulnerability stems from a graphical page that lacks data validation filters for user-supplied data and output. An authenticated attacker could use the vulnerability to create a link on the graphical page containing reflected Javascript code and send it to other users.