← Database

CVE-2021-43584

MEDIUM CVSS: 4.8 Published: 2024-01-24 Modified: 2026-06-17

Description

DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4.0 allows attackers to run arbitrary code via the name element when filtering for a log.

Affected Platforms

Nagios Nagios Cross Platform Agent

Weakness Type

CWE-79, CWE-79

References