CVE-2020-25139

Observium (Professional, Enterprise & Community) v20.8.10631 is affected by a cross-site scripting (XSS) vulnerability. The issue arises from accepting a crafted la_id parameter to the /syslog_rules URI for delete_syslog_rule, due to syslog_rules.inc.php, allowing injection and storage of malicio...