CVE-2022-45437: Pandorafms Pandora Fms

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting (XSS). A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload without interaction and attacker can get information.

Affected products

• Pandorafms Pandora Fms: version 765 only

Published 2023-02-15. Last modified 2026-06-17.