Nagios XI Cross-Site Scripting Vulnerability (CNVD-2021-90909)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A reflective cross-site scripting vulnerability exists in the generic user interface of versions of Nagios XI prior to 5.8.4. An attacker could exploit the vulnerability to execute arbitrary JavaScript code by tricking a user into visiting a specially crafted URL.