What’s Vulnerable › Vulnerabilities

CVE-2022-47373: Reflected Cross Site Scripting in Search Functionality of Module Library

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-15 · updated 2026-06-17
• Weakness: CWE-352

Description

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.

Affected products

• Artica PFMS Pandora FMS: through 766

References

• https://github.com/Argonx21/CVE-2022-47373
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
• https://github.com/Argonx21/CVE-2022-47373
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Get alerted when CVE-2022-47373 or the next vulnerability affects your stack