EPSS
Percentile
93.3%
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.
code610.blogspot.com/2019/12/multiple-xss-bugs-in-nagios-569.html