CVE-2021-35501

PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console

published June 25, 2021

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01001 · 62.5th percentile
Published
2021-06-25T15:05Z
EPSS history
Timeline
  • 25 JUN 15:05Z
    PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console
    cvelistv5