CVE-2026-30812

Stored Cross-Site Scripting in Event Comments via Filter Bypass PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800

Affected (CNA)

Vendor / product	Versions
Pandora FMS / Pandora FMS	affected 777 through 800

CWE

CWE-79

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.