| Package | Affected versions | Patched versions |
|---|---|---|
| artica pandora fms | < 7.0_ng_723 | 7.0_ng_723 |
XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free