CVE-2024-53457

A stored cross-site scripting XSS vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter...

CVE-2024-53457

LibreNMS versions v24.9.0 through v24.10.0 are susceptible to a stored cross-site scripting (XSS) vulnerability within the Device Settings module. The root cause is the lack of protective measures when processing the Display Name parameter, allowing an attacker to inject a crafted payload. This e...

CVE-2024-53457

A stored cross-site scripting XSS vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter...