THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-7cj5-v4pp-v632 (medium) — LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users

[GHSA] GHSA-7cj5-v4pp-v632 (medium) — LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users

medgithub_advisoriesPublished 2026-08-18

GHSA-7cj5-v4pp-v632 Severity: medium CVE: None

LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users

### Summary The `graph_descr.<graphtype>` family of settings is echoed verbatim without `htmlspecialchars()` in `includes/html/pages/graphs.inc.php:194`. Any admin can store a malicious HTML payload that executes in every authenticated user'

Original source: https://github.com/advisories/GHSA-7cj5-v4pp-v632