Nagvis · Nagvis · CVE-2023-46287
**Name of the Vulnerable Software and Affected Versions**
NagVis versions prior to 1.9.38
**Description**
The issue exists due to a cross-site scripting (XSS) flaw in the select function located in share/server/core/functions/html.php. This allows for potential XSS attacks.
**Recommendations**
For versions prior to 1.9.38, update to version 1.9.38 or later to resolve the issue. As a temporary workaround, consider restricting access to the select function in share/server/core/functions/html.php until a patch is applied.