| Package | Affected versions | Patched versions |
|---|---|---|
| observium | = 24.4.13528 |
A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need to click a malicious link provided by the attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free