Pandora FMS Persistent Cross-Site Scripting (CVE-2020-13853)

A persistent cross site scripting vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

CVE-2020-13853

Pandora FMS 7.44 is affected by CVE-2020-13853, a persistent Cross-Site Scripting (XSS) vulnerability in the Messages feature. The CoreLabs advisory details that an attacker can inject arbitrary JavaScript into messages, which is executed in the recipient’s browser and can facilitate session cook...

: Pandora FMS Community Multiple Vulnerabilities

1. Advisory Information Title : Pandora FMS Community Multiple Vulnerabilities Advisory ID : CORE-2020-0010 Advisory URL : www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities Date published : 2020-06-09 Date of last update : 2020-06-09 Vendors contacted: Ártic...