| Package | Affected versions | Patched versions |
|---|---|---|
| cacti | = 1.1.38 |
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free