Total vulnerabilities in the database
Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered.
| Software | From | Fixed in |
|---|---|---|
| nagios / nagios | 2.1.3 | 2.1.3.x |