CVE-2021-28924

MEDIUM

Nagios Network Analyzer < 2.4.3 - Authenticated Cross-Site Scripting via Groups Queries Page

Title source: llm

Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Release Notes, Vendor Advisory x_refsource_misc

CVSS v3 6.1

EPSS 0.5242

EPSS Percentile 98.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

nagios/network_analyzer < 2.4.3

Published Apr 08, 2021

Tracked Since Feb 18, 2026