NetSight
medium5.4

CVE-2018-15713

Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php.

Impact

Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php.

Affected products

VendorProductAffected versions
NagiosNagios Xi
Version 5.5.6

Weakness classification

References