Nagios XI Cross-Site Scripting Vulnerability in Update Checking Feature

A stored cross-site scripting vulnerability has been identified in Nagios XI versions prior to 5.8.9. The issue arises in the update checking feature, where insufficient validation or escaping of user-supplied input allows an attacker to inject and execute arbitrary scripts in the context of the victim's browser.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of users who access the affected feature.

Remediation

Users can upgrade to Nagios XI version 5.8.9 or later to address this vulnerability.