CVE-2018-20726: XSS
Published Jan 16, 2019
·Updated
A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.
Affected Software
1 affected component
Cacti Cacti<1.2.0
Remediation
Event History
Jan 16, 2019
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-20726?
CVE-2018-20726 is a cross-site scripting (XSS) vulnerability that exists in host.php (via tree.php) in Cacti before version 1.2.0.
2
How does CVE-2018-20726 impact Cacti?
CVE-2018-20726 allows an attacker to execute malicious scripts in the Website Hostname field for Devices in Cacti.
3
What is the severity of CVE-2018-20726?
The severity of CVE-2018-20726 is medium with a CVSS score of 5.4.
4
How can I fix CVE-2018-20726 in Cacti?
To fix CVE-2018-20726, users should upgrade to Cacti version 1.2.0 or later.
5
What is the CWE-ID of CVE-2018-20726?
The CWE-ID of CVE-2018-20726 is CWE-79 (Cross-Site Scripting).