Threats tagged 'ghsa-f59v-q7cp-mw78'

Nagios XI versions prior to 2024R1.1.2 are affected by a reflected cross-site scripting (XSS) vulnerability on the login page when accessed using older web browsers. This vulnerability arises due to insufficient validation or escaping of user input reflected by the login page, enabling attackers to execute arbitrary JavaScript in the context of the Nagios XI origin. Modern browsers may mitigate some attack vectors, but legacy browsers remain vulnerable.