[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-23226":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":54,"duplicate_of":9,"upstream":55,"downstream":56,"duplicates":65,"related":66,"reserved_at":9,"published_at":67,"modified_at":68,"state":69,"summary":70,"references_raw":78,"kevs":96,"epss":97,"epss_history":100,"metrics":360,"affected":371},"CVE-2020-23226","Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_admin.php, and (7) data_input.php.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[45],{"_key":46,"name":47,"source":48,"url":49,"maturity":50,"reliability_score":51,"verified":52,"type":9,"platforms":53,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_CACTI_CACTI","Cacti","github","https://github.com/Cacti/cacti/issues/847","poc",0.3,false,[],[],[],[57,59,61,63],{"_key":58},"UBUNTU-CVE-2020-23226",{"_key":60},"DLA-2965-1",{"_key":62},"DLA-3252-1",{"_key":64},"DEBIAN-CVE-2020-23226",[],[],"2021-08-27T00:00:00.000Z","2024-08-04T14:58:14.958Z","Modified",{"cisa_kev":52,"cisa_ransomware":52,"cisa_vendor":9,"epss_severity":71,"epss_score":72,"severity":73,"severity_score":74,"severity_version":75,"severity_source":76,"severity_vector":77,"severity_status":69},"low",0.01252,"medium",6.1,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[79,87,92],{"url":80,"sources":81,"tags":83},"https://github.com/Cacti/cacti/issues/3549",[82,76],"cve.org",[84,85,86],"Exploit","Issue Tracking","Third Party Advisory",{"url":88,"sources":89,"tags":90},"https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html",[82,76],[91,86],"Mailing List",{"url":93,"sources":94,"tags":95},"https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html",[82,76],[91,86],[],{"date":98,"score":72,"percentile":99},"2026-06-04",0.79676,[101,105,107,110,113,116,118,120,123,126,129,132,135,138,141,145,148,151,154,157,160,163,166,169,172,174,176,179,182,185,187,189,192,195,198,201,204,207,210,213,215,218,220,222,225,228,231,234,236,239,241,244,247,250,253,256,259,262,265,269,272,276,280,283,286,289,292,295,298,301,304,306,309,312,315,318,321,324,327,330,333,336,339,342,344,347,350,353,355,357],{"date":102,"score":103,"percentile":104},"2025-11-04",0.01286,0.78972,{"date":106,"score":103,"percentile":104},"2025-11-05",{"date":108,"score":103,"percentile":109},"2025-11-06",0.7897,{"date":111,"score":103,"percentile":112},"2025-11-07",0.78983,{"date":114,"score":103,"percentile":115},"2025-11-08",0.78989,{"date":117,"score":103,"percentile":112},"2025-11-09",{"date":119,"score":103,"percentile":109},"2025-11-10",{"date":121,"score":103,"percentile":122},"2025-11-11",0.78973,{"date":124,"score":103,"percentile":125},"2025-11-12",0.7899,{"date":127,"score":103,"percentile":128},"2025-11-13",0.78999,{"date":130,"score":103,"percentile":131},"2025-11-14",0.79006,{"date":133,"score":103,"percentile":134},"2025-11-15",0.79005,{"date":136,"score":103,"percentile":137},"2025-11-16",0.79007,{"date":139,"score":103,"percentile":140},"2025-11-17",0.79,{"date":142,"score":143,"percentile":144},"2025-11-18",0.01531,0.7973,{"date":146,"score":143,"percentile":147},"2025-11-19",0.79735,{"date":149,"score":143,"percentile":150},"2025-11-20",0.79741,{"date":152,"score":103,"percentile":153},"2025-11-21",0.79024,{"date":155,"score":103,"percentile":156},"2025-11-22",0.79026,{"date":158,"score":103,"percentile":159},"2025-11-23",0.79016,{"date":161,"score":103,"percentile":162},"2025-11-24",0.79013,{"date":164,"score":103,"percentile":165},"2025-11-25",0.79018,{"date":167,"score":103,"percentile":168},"2025-11-26",0.79019,{"date":170,"score":103,"percentile":171},"2025-11-27",0.79021,{"date":173,"score":103,"percentile":162},"2025-11-28",{"date":175,"score":103,"percentile":171},"2025-11-29",{"date":177,"score":103,"percentile":178},"2025-11-30",0.7902,{"date":180,"score":103,"percentile":181},"2025-12-01",0.79111,{"date":183,"score":103,"percentile":184},"2025-12-02",0.79113,{"date":186,"score":103,"percentile":184},"2025-12-03",{"date":188,"score":103,"percentile":178},"2025-12-04",{"date":190,"score":103,"percentile":191},"2025-12-05",0.79025,{"date":193,"score":103,"percentile":194},"2025-12-06",0.79027,{"date":196,"score":103,"percentile":197},"2025-12-07",0.79028,{"date":199,"score":103,"percentile":200},"2025-12-08",0.79032,{"date":202,"score":103,"percentile":203},"2025-12-09",0.79048,{"date":205,"score":103,"percentile":206},"2025-12-10",0.79069,{"date":208,"score":103,"percentile":209},"2025-12-11",0.79084,{"date":211,"score":103,"percentile":212},"2025-12-12",0.79103,{"date":214,"score":103,"percentile":212},"2025-12-13",{"date":216,"score":103,"percentile":217},"2025-12-14",0.791,{"date":219,"score":103,"percentile":217},"2025-12-15",{"date":221,"score":103,"percentile":181},"2025-12-16",{"date":223,"score":103,"percentile":224},"2025-12-17",0.79118,{"date":226,"score":103,"percentile":227},"2025-12-18",0.79137,{"date":229,"score":103,"percentile":230},"2025-12-19",0.79148,{"date":232,"score":103,"percentile":233},"2025-12-20",0.79144,{"date":235,"score":103,"percentile":227},"2025-12-21",{"date":237,"score":103,"percentile":238},"2025-12-22",0.79139,{"date":240,"score":103,"percentile":238},"2025-12-23",{"date":242,"score":103,"percentile":243},"2025-12-24",0.79153,{"date":245,"score":103,"percentile":246},"2025-12-25",0.79172,{"date":248,"score":103,"percentile":249},"2025-12-26",0.79169,{"date":251,"score":103,"percentile":252},"2025-12-27",0.79218,{"date":254,"score":103,"percentile":255},"2025-12-28",0.79159,{"date":257,"score":103,"percentile":258},"2025-12-29",0.79154,{"date":260,"score":103,"percentile":261},"2025-12-30",0.79161,{"date":263,"score":103,"percentile":264},"2025-12-31",0.79176,{"date":266,"score":267,"percentile":268},"2026-01-01",0.00948,0.75932,{"date":270,"score":267,"percentile":271},"2026-01-02",0.75936,{"date":273,"score":274,"percentile":275},"2026-01-03",0.01417,0.80227,{"date":277,"score":278,"percentile":279},"2026-01-04",0.01245,0.7882,{"date":281,"score":278,"percentile":282},"2026-01-05",0.78817,{"date":284,"score":278,"percentile":285},"2026-01-06",0.78823,{"date":287,"score":278,"percentile":288},"2026-01-07",0.78831,{"date":290,"score":278,"percentile":291},"2026-01-08",0.78839,{"date":293,"score":278,"percentile":294},"2026-01-09",0.78841,{"date":296,"score":278,"percentile":297},"2026-01-10",0.78844,{"date":299,"score":278,"percentile":300},"2026-01-11",0.78838,{"date":302,"score":278,"percentile":303},"2026-01-12",0.78827,{"date":305,"score":278,"percentile":285},"2026-01-13",{"date":307,"score":72,"percentile":308},"2026-01-14",0.7891,{"date":310,"score":72,"percentile":311},"2026-01-15",0.78911,{"date":313,"score":72,"percentile":314},"2026-01-16",0.78917,{"date":316,"score":72,"percentile":317},"2026-01-17",0.78925,{"date":319,"score":72,"percentile":320},"2026-01-18",0.78921,{"date":322,"score":72,"percentile":323},"2026-01-19",0.78916,{"date":325,"score":72,"percentile":326},"2026-01-20",0.78915,{"date":328,"score":72,"percentile":329},"2026-01-21",0.7892,{"date":331,"score":72,"percentile":332},"2026-01-22",0.78929,{"date":334,"score":72,"percentile":335},"2026-01-23",0.78957,{"date":337,"score":72,"percentile":338},"2026-01-24",0.78967,{"date":340,"score":72,"percentile":341},"2026-01-25",0.7896,{"date":343,"score":72,"percentile":335},"2026-01-26",{"date":345,"score":72,"percentile":346},"2026-01-27",0.78956,{"date":348,"score":72,"percentile":349},"2026-01-28",0.78958,{"date":351,"score":72,"percentile":352},"2026-01-29",0.78953,{"date":354,"score":72,"percentile":346},"2026-01-30",{"date":356,"score":72,"percentile":341},"2026-01-31",{"date":358,"score":72,"percentile":359},"2026-02-01",0.79056,[361],{"source":76,"cvss_v2_0":362,"cvss_v3_0":9,"cvss_v3_1":367,"cvss_v4_0":9},{"baseScore":363,"baseSeverity":9,"vectorString":364,"impactScore":365,"exploitabilityScore":366},4.3,"AV:N/AC:M/Au:N/C:N/I:P/A:N",2.9,8.6,{"baseScore":74,"baseSeverity":368,"vectorString":77,"impactScore":369,"exploitabilityScore":370},"MEDIUM",4.5,7.2,[372,377],{"ecosystem":9,"name":47,"vendor":9,"product":47,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":373},[374],{"version":375,"is_range":52,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.2.12","cpe",{"ecosystem":9,"name":378,"vendor":379,"product":380,"cpe_part":381,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":382},"debian linux","debian","debian_linux","o",[383,385],{"version":384,"is_range":52,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0",{"version":386,"is_range":52,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0"]