CVE-2018-20726

3.5

LOWCVSS v2

Published

January 16, 2019

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.

Cacti/cacti

GitHubCacti ™

< 1.2.0NVD

cacti

NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'

< 1.2.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-20726

Description

More on this CVE