CVE-2023-49086 | Cacti up to 1.2.25 Incomplete Fix CVE-2023-39360 graphs_new.php cross site scripting

A vulnerability was found in Cacti up to 1.2.25. It has been rated as problematic. Affected by this issue is some unknown functionality of the file graphs_new.php of the component Incomplete Fix CVE-2023-39360. The manipulation leads to cross site scripting.

This vulnerability is handled as CVE-2023-49086. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.