Cross site scripting

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...