CVE-2016-15054 – Nagios XI < 5.4.0 XSS via jQuery Migrate Library

CVE ID : CVE-2016-15054

Published : Nov. 3, 2025, 10:15 p.m. | 1 hour, 12 minutes ago

Description : Nagios XI versions prior to 5.4.0 are vulnerable to cross-site scripting (XSS) via the jQuery Migrate library. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim’s browser.

Severity: 5.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…