Skip to content
Sign in
Not rated

CVE-2021-23225 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the…

Description

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php.

Affected products and versions

Product Affected versions Fixed in
Cacti 1.1.38 No fix stated

Other CVEs of Cacti

The 3 CVEs of Cacti →
CVE-2021-26247 As an unauthenticated remote user, visit "http:///auth_changepassword.php?ref=alert(1)" to successfully execute the… Not rated CVE-2021-3816 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix… Not rated
Track this CVE