CVE-2020-23992 Information

Description

Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request.

Reference

https://github.com/EmreOvunc/Nagios-XI-Reflected-XSS