Paessler PRTG Network Monitor Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Paessler PRTG Network Monitor versions prior to 25.4.114. An unauthenticated attacker can exploit this vulnerability by injecting and executing arbitrary JavaScript in the context of the user's browser, specifically through the tag parameter. The attack requires convincing the user to click on a malicious link that triggers the injection.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious scripts in the context of the user's session, potentially leading to session cookie theft and unauthorized actions on behalf of the user.

Remediation

Users can upgrade to Paessler PRTG Network Monitor version 25.4.114.1032 or later to address this vulnerability.