CVE-2021-46680

6.1 mediumEPSS 0.4%

Medium (6.1) in pandorafms pandora fms. EPSS 0.4% chance of exploitation in the next 30 days.

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-08-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pandorafms:pandora_fms

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Check your stack JSON