A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01161·Published 2020-07-23·Fixed in 1.5CWE-79