CVE-2021-46678

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field...

CVE-2021-46678 Vulnerability XSS in service form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field...

CVE-2021-46678

CVE-2021-46678 is a cross-site scripting (XSS) vulnerability in Pandora FMS versions up to and including 756, where an attacker can inject JavaScript via the service name field. The root cause is an input validation/payload handling flaw that allows script execution in the application’s UI. Impac...