CVE-2026-15501 AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.testmcpconnection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcpserverconfig.url leads to...

CVE-2020-27989

Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools Edit Dashboard...

Design/Logic Flaw

Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools Edit Dashboard...

CVE-2020-27989

Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools Edit Dashboard...

CVE-2020-27989

Nagios XI before 5.7.5 is affected by a Cross‑Site Scripting (XSS) vulnerability in Dashboard Tools (Edit Dashboard). The root cause is insufficient input validation when processing Deploy Dashboards requests, enabling stored XSS through the Dashboard feature. Impact is browser‑based script execu...