CVE-2020-23226: XSS
Published Aug 27, 2021
·Updated
Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reportsadmin.php, (2) dataqueries.php, (3) datainput.php, (4) graphtemplates.php, (5) graphs.php, (6) reportsadmin.php, and (7) datainput.php.
Affected Software
3 affected components
Cacti Cacti=1.2.12
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Event History
Aug 27, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2020-23226?
CVE-2020-23226 is a vulnerability that allows for multiple Cross Site Scripting (XSS) attacks in Cacti 1.2.12.
2
Which software versions are affected by CVE-2020-23226?
Cacti 1.2.12 and Debian Linux 9.0 and 10.0 are affected by CVE-2020-23226.
3
What is the severity of CVE-2020-23226?
The severity of CVE-2020-23226 is medium with a CVSS score of 6.1.
4
How do I fix CVE-2020-23226?
To fix CVE-2020-23226, it is recommended to update to a patched version of Cacti.
5
Where can I find more information about CVE-2020-23226?
You can find more information about CVE-2020-23226 on the following references: [1] [2] [3]