| Package | Affected versions | Patched versions |
|---|---|---|
| cacti | = 1.1.38 |
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free