CVE-2023-7321

Medium · 5.4

CVSS

5.4

EPSS

0.5%

Published

Oct 30, 2025

CISA due date

—

The record

Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.

Affected packages

Ecosystem	Package	Introduced	Fixed