CVE-2019-9167
Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter.
Date published : 2019-03-28
https://www.nagios.com/downloads/nagios-xi/change-log/