2 matches found
CVE-2024-13992
Nagios XI versions prior to 2024R1.1 is vulnerable to a cross-site scripting XSS when a user visits the "missing page" 404 page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker t...
5.4CVSS6AI score0.00547EPSS
SaveExploits0References1
CVE-2024-13992 Nagios XI < 2024R1.1 XSS via Missing Page / 404
Nagios XI versions prior to 2024R1.1 is vulnerable to a cross-site scripting XSS when a user visits the "missing page" 404 page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker t...
5.1CVSS0.00547EPSS
SaveExploits0References3
20