CVE-2019-20139

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.

Date published : 2019-12-30

https://code610.blogspot.com/2019/12/multiple-xss-bugs-in-nagios-569.html