CVE-2018-10060
Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php.
Published: 2018-04-12 · CVSS: Unscored
Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7