CVE-2022-47372 Stored cross-site scripting vulnerability in create event section

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the...

CVE-2022-47372

Pandora FMS Console versions v766 and lower expose a stored cross‑site scripting (XSS) vulnerability in the Create event section. An attacker can inject XSS payloads on pages or supply a link that, when viewed by a user, executes script in the victim’s browser. The reports consistently identify P...

CVE-2022-47372 Stored cross-site scripting vulnerability in create event section

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the...