CVE-2021-36698

MediumCVSS 5.4

Published: 03/11/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

An XSS vulnerability in Pandora FMS up to version 755 allows an attacker to inject malicious script by creating a new event filter with a crafted name.

Risk Assessment

An attacker can steal user sessions, redirect users to malicious sites, or perform other actions in their browser context, threatening data confidentiality and integrity.

Recommendation

Immediately upgrade Pandora FMS to a version newer than 755 and implement input validation for event filter names.

Original NVD description (English source)

Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.