CVE-2026-30812CWE-79

Stored Cross-Site Scripting in Event Comments via Filter Bypass

Low · published April 13, 2026

CVSS v4.0
2.1
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Amber
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-04-13T15:48Z
EPSS history
Timeline
  • 13 APR 15:48Z
    Stored Cross-Site Scripting in Event Comments via Filter Bypass
    cvelistv5