Cross site scripting

2023-12-2912:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

pandora fms

web page generation

input neutralization

file manager

nvd

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Malicious code could be executed in the File Manager section. This issue affects Pandora FMS: from 700 through 774.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmsle774

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	le	774

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/