Cross site scripting

2023-12-2912:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

pandora fms

visual consoles

vulnerability

nvd

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). It was possible to execute malicious JS code on Visual Consoles. This issue affects Pandora FMS: from 700 through 774.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmsle774

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	le	774

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/