CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

PT-2023-14666 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Artica PFMS Pandora FMS version v765 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. A user with edition privileges can create a payload in the reporting...