A web‑based application that monitors network performance contains a reflected cross‑site scripting flaw in the footer of its authentication interface. When a user visits the page, a malicious string supplied by an attacker can be echoed into the page and executed as JavaScript. The flaw is a classic reflected XSS as defined by CWE‑79 and could let an attacker hijack the user’s session, steal credentials, or perform other malicious actions within the context of the victim’s browser. No direct remote code execution on the server side is described, but the impact on confidentiality, integrity, and availability is limited to the browser session of the victim.

Cacti 1.2.30 and earlier versions are affected by the vulnerability, while the bug was corrected in 1.2.31 and later releases.

The CVSS score of 5.3 indicates a moderate severity. The EPSS score is not reported, so the exploit probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. It is likely exploitable through the public authentication page, where the attacker can craft a URL that causes the malicious payload to be reflected in the page. No privileged access or additional prerequisites are mentioned, so the attack vector is straightforward for an unauthenticated user who can reach the login page.