CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme

published November 14, 2021

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01481 · 73.7th percentile
Published
2021-11-14T19:48Z
EPSS history
Timeline
  • 14 NOV 19:48Z
    Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme
    cvelistv5