Dolevf

The issue allows remote attackers to inject arbitrary web script or HTML via a crafted check plugin, the description in a host profile, or the `plugin args` parameter to a Test service check page.