Threats tagged 'ghsa-jmqm-f8q4-v7wx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-45694LibreNMS · Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment Medium5.4EPSS 0.2%2026-08-12GCVE DatabaseCVE-2026-45694 LibreNMS versions prior to 26.5.0 contain a reflected cross-site scripting (XSS) vulnerability in the Proxmox app integration. The vulnerability arises because user-supplied GET parameters 'instance' and 'vmid' are inserted into a JavaScript document.title assignment without proper encoding, allowing injection of arbitrary script. Exploitation requires an authenticated session and user interaction with a crafted link. The vulnerability has a CVSS 3.1 score of 5.4 (medium severity). EPSS 0.2%Vulnerability CWE-79 #ghsa-jmqm-f8q4-v7wx #packagist	GCVE Database	2026-08-12

Page 1 of 1