Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_admin.php, and (7) data_input.php.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23226
Reference (s):
- https://github.com/Cacti/cacti/issues/3549