CVE-2020-25135: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting XSS due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the graphtitle parameter to the graphs/ URI...

PT-2020-15971

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue was discovered that allows Cross-Site Scripting XSS due to the possibility of injecting and storing malicious JavaScript code. This can occur via the graph...