CVE-2011-1523

no score yetEPSS 2.9%

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2011-05-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

nagios:nagios

References

http://openwall.com/lists/oss-security/2011/03/25/3
http://openwall.com/lists/oss-security/2011/03/28/4
http://secunia.com/advisories/43287
http://secunia.com/advisories/44974
http://securityreason.com/securityalert/8241

Check your stack JSON