CVE-2025-47931

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 25.5.0

Description: The issue is a Stored Cross-Site Scripting (XSS) vulnerability that affects the group name parameter of the "http://localhost/poller/groups" form. This allows attackers to inject malicious scripts into web pages viewed by other users.

Recommendations: For versions prior to 25.5.0, update to version 25.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "http://localhost/poller/groups" form until the update is applied. Avoid using the group name parameter in the affected form until the issue is resolved.