Describe the bug
If any of the above Cacti Graph objects have a title with an stored XSS script value, it can be executed during Cacti's Callback process. This can lead to XSS issues in Cacti.
To Reproduce
Steps to reproduce the behavior:
-
Save an object above with a title of <script>alert('something');<?script>
-
Goto any Cacti page that includes one of these object callbacks
-
Search on something
-
See error
Expected behavior
Less bugs in Cacti!
Describe the bug
If any of the above Cacti Graph objects have a title with an stored XSS script value, it can be executed during Cacti's Callback process. This can lead to XSS issues in Cacti.
To Reproduce
Steps to reproduce the behavior:
Save an object above with a title of
<script>alert('something');<?script>Goto any Cacti page that includes one of these object callbacks
Search on something
See error
Expected behavior
Less bugs in Cacti!