VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 9, 2021· Updated Jun 17, 2026

CVE-2021-35488

CVE-2021-35488

Description

Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Thruk/Thrukdescription
  • Thruk/Thrukllm-fuzzy
    Range: <=2.40-2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.