Cross site request forgery (csrf)

An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in 1 the Schedule New Report screen via the hour, minute, or ampm parameter, related to components/scheduledreporting; 2 includes/components/xicore/downtime.php, related to the updatepages function; 3 the ajaxhelper.ph...

PT-2018-9959

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.4.13 Description: An issue was discovered in Nagios XI, allowing for XSS exploitation via CSRF. This can occur through various means, including the Schedule New Report screen via the hour, minute, or ampm parameter, the...