Librenms · Librenms · CVE-2023-4978
**Name of the Vulnerable Software and Affected Versions**
librenms versions prior to 23.9.0
**Description**
The issue is related to Cross-site Scripting (XSS) - DOM, which occurs when an application includes user input in its output without proper validation or escaping, allowing an attacker to inject malicious scripts. This can lead to unauthorized actions on behalf of the user, such as stealing session cookies or performing actions as the user.
**Recommendations**
For versions prior to 23.9.0, update to version 23.9.0 or later to resolve the issue.