CVE-2021-46680 MEDIUM

CVE-2021-46680: Vulnerability XSS in module form name field

Vendor Artica Pfms
Product Pandora FMS
Weakness CWE-79 · XSS
Published August 5, 2022
Last update June 2, 2026
View on NVD All CVEs

CVSS base score

4.0/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field.

Key dates

02Disclosure timeline

August 5, 2022 CVE published
June 2, 2026 Record updated