Skip to content
OpenAdvisories
Medium · 4.8 CVE-2021-43584 EUVD-2021-30499GHSA-3w6g-cv32-6cpq

DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.…

Published Jan 24, 2024 · Updated Jun 16, 2025 · Assigned by mitre

Description

DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4.0 allows attackers to run arbitrary code via the name element when filtering for a log.

References