Threats tagged 'ghsa-hc96-98mh-7j3h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.4%	CVE-2026-48550Nagios Core · Cross-site Scripting Medium5.1EPSS 0.4%2026-08-12CVE Database V5CVE-2026-48550 Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim's browser. EPSS 0.4%Vulnerability Nagios Enterprises, LLC #ghsa-hc96-98mh-7j3h	CVE Database V5	2026-08-12

Page 1 of 1