Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.
| Software | From | Fixed in |
|---|---|---|
| nagios / nagios_core | 4.4.2 | 4.4.2.x |
| debian / debian_linux | 8.0 | 8.0.x |