Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...
3.5CVSS5.5AI score0.01051EPSS
SaveExploits1References4Affected Software2
Debian CVE•added 2018/04/12 4:0 p.m.•48 views
CVE-2018-10061
Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...
5.4CVSS5.2AI score0.01051EPSS
SaveExploits1
Cvelist•added 2018/04/12 4:0 p.m.•32 views
CVE-2018-10061
Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...