Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15902
Reference (s):
- https://insinuator.net/2020/07/security-advisories-for-nagios-xi/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://www.nagios.com/products/security/