Cross site scripting

2023-12-2912:15:00

PRIOn knowledge base

www.prio-n.com

pandora fms

cross-site scripting

html payload

xss

vulnerability

nvd

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Through an HTML payload (iframe tag) it is possible to carry out XSS attacks when the user receiving the messages opens their notifications. This issue affects Pandora FMS: from 700 through 774.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmsle774

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	le	774

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/