CVE-2021-35501

Name of the Vulnerable Software and Affected Versions: PandoraFMS versions prior to 7.55

Description: The issue allows for Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed.

Recommendations: For PandoraFMS versions prior to 7.55, update to version 7.55 or later to resolve the issue. As a temporary workaround, consider restricting access to the visual console to minimize the risk of exploitation. Avoid using the name field in the visual console until the issue is resolved.