CVE-2020-25706

Published
View on NVD ↗
CVSS v3
5.4
MEDIUM
CVSS v2
4.3
MEDIUM
Affected
1
PROJECT

Description

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field

Cacti ™
GitHubGitHub
1.83K