CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...

CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...

CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...

CVE-2020-24712

Gophish before 0.11.0 contains a Cross Site Scripting (XSS) vulnerability exploitable via the IMAP Host field on the account settings page. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, CVE listing) with consistent description: XSS in versions prior to 0.11.0. The known ...

CVE-2020-24712: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...