← Database

CVE-2021-35501

MEDIUM CVSS: 5.4 Published: 2021-06-25 Modified: 2026-06-17

Description

PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed.

Affected Platforms

Pandorafms Pandora Fms

Weakness Type

CWE-79

References