Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name
(Escalation Name) parameter at Configuration/Notifications/Escalations
. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches.