CVE-2026-84188: Improper Neutralization of Input During Web Page Generation

LibreNMS versions = 26.4.0 contain a stored cross-site scripting vulnerability in the graphdescr. configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any...