| Package | Affected versions | Patched versions |
|---|---|---|
| observium | = 24.4.13528 |
A cross-site scripting (xss) vulnerability exists in the weather map editor functionality of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free