CVE-2021-47698 – Nagios XI < 5.8.7 XSS in Core UI Views URL handling

CVE ID : CVE-2021-47698

Published : Nov. 3, 2025, 10:15 p.m. | 1 hour, 12 minutes ago

Description : Nagios XI versions prior to 5.8.7 using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via the Core UI’s Views URL handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim’s browser.

Severity: 5.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…