Nightscout Web Monitor (aka cgm-remote-monitor) 14.2.2 allows XSS via a crafted X-Forwarded-For header.
{
"cpe": "cpe:2.3:a:cgm-remote-monitor_project:cgm-remote-monitor:14.2.2:*:*:*:*:*:*:*",
"source": [
"CPE_STRING",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "14.2.2"
},
{
"last_affected": "14.2.2"
}
]
}