CVE-2018-10060

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.1.37

Description: The issue arises from the software's failure to properly reject unintended characters, which is related to the use of the sanitize uri function in lib/functions.php. This can lead to a cross-site scripting (XSS) attack.

Recommendations: For versions prior to 1.1.37, update to version 1.1.37 or later to resolve the issue. As a temporary workaround, consider restricting access to the sanitize uri function in lib/functions.php until a patch is available.