Siimots

**Name of the Vulnerable Software and Affected Versions** Uptime Kuma versions 1.19.6 and before **Description** A Cross Site Scripting issue allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the "status page.js" endpoint. **Recommendations** For Uptime Kuma versions 1.19.6 and before, consider disabling the description, title, footer, and incident creation parameters in the status page.js endpoint as a temporary workaround until a patch is available. Restrict access to the status page.js endpoint to minimize the risk of exploitation. Avoid using the parameters related to description, title, footer, and incident creation in the affected endpoint until the issue is resolved.