CVE-2017-12978
Fixed in a distro release EPSS <1%
lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.
Products: cacti
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 1.1.18+ds1-1 |
| Debian 13 | cacti | 1.1.18+ds1-1 |
| Debian 14 | cacti | 1.1.18+ds1-1 |
| openSUSE Tumbleweed | cacti | 1.2.18-1.2 |