| Package | Affected versions | Patched versions |
|---|---|---|
| cacti | = 1.1.25 |
include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free