A vulnerability categorized as problematic has been discovered in Centreon Infra Monitoring up to 23.10.27/24.04.17/24.10.12. The impacted element is an unknown function of the component HTTP Loader Widget Module. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-8428. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.