EIP-2026-105681

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Cacti versions prior to 0.8.7b. The vulnerability arises from insufficient sanitization of user-supplied input in the 'action' parameter of the data_input.php script.