CVE-2024-53457
A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a …
Published: 2024-12-05 · CVSS: 5.4 · CVSS 3.1
A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7