Sploitus

CVE-2018-20726

No indexed exploits for CVE-2018-20726 yet

A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.

Affected products
Alt Linux, Cacti, Suse
Cacti
< 1.2.0
Fix
Available
CVSS 3.0
5.4 MEDIUM
EPSS
1.0% (61th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2019-01-16
CVE-2018-20726 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2018-20726 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2018-20726 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.