Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database

Description

Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `form_save()` function in `data_queries.php` is not thoroughly checked and is used to concatenate the HTML statement in `grow_right_pane_tree()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.

Scores

EPSS (exploitation in 30 days)

0.84% · top 42% of all CVEs (7 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.7.

Weakness

• CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (opens in a new tab)All about CWE-79 and its CVEs

Affected products

• Cacti · cacti

  • affected < 1.2.27

References (4)

• https://github.com/Cacti/cacti/security/advisories/GHSA-rqc8-78cm-85j3 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://github.com/Cacti/cacti/commit/f946fa537d19678f938ddbd784a10e3290d275cf (opens in a new tab)x_refsource_MISCx_transferred
• https://lists.fedoraproject.org/archives/list/[email protected]/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ (opens in a new tab)x_transferred
• https://lists.debian.org/debian-lts-announce/2024/09/msg00027.html (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-31443](https://trackcve.app/badge/CVE-2024-31443.svg)](https://trackcve.app/cve/CVE-2024-31443)

Record last updated 4 Nov 2025, 16:11 UTC.