CVE-2018-20724

A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...

CVE-2018-20724

CVE-2018-20724 is a cross-site scripting (XSS) vulnerability in Cacti before 1.2.0, caused by a lack of escaping unintended characters in the Website Hostname used by Data Collectors (pollers.php). Public documentation confirms fixes in later releases: cacti-spine updated to 1.2.9 (openSUSE/SUSE ...

CVE-2018-20724: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...

PT-2019-10182

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting XSS issue exists due to the lack of escaping of unintended characters in the Website Hostname for Data Collectors. This occurs in the pollers.php file. Recommendations: For...