TI-2018-07985 CVE-2018-11223 · GHSA-h9hw-5rmm-8m66XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code…Priority LOW 27XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call.CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01303 · Published 2018-06-15 · No fix listed CWE-79