| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | < 5.5.4 | 5.5.4 |
A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript code within the auto login admin management page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free