{“lastseen”:””,”description”:”LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts \\u003e Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0.”,”published”:”2025-10-16T17:54:09.256Z”,”modified”:”2025-10-16T17:54:09.256Z”,”type”:”cve”,”title”:”LibreNMS alert-rules Cross-Site Scripting Vulnerability”,”source”:”GitHub_M”,”references”:”https:\/\/github.com\/librenms\/librenms\/security\/advisories\/GHSA-6g2v-66ch-6xmh\\nhttps:\/\/github.com\/librenms\/librenms\/commit\/dccdf6769976a974d70f06a7ce8d5a846b29db6f”,”id”:”CVE-2025-62412″,”bulletinFamily”:””,”cwe”:[“CWE-79″],”cvelist”:null,”sourceData”:”librenms librenms \\u003c 25.10.0″,”sourceHref”:””,”cvss”:{“score”:3.8,”severity”:”LOW”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:L\/I:L\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”librenms”,”version”:”\\u003c 25.10.0″,”vendor”:”librenms”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts \\u003e Alert Rules page is not properly sanitized, and can…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,127,12,71,13,7,11,5],"class_list":["post-22102","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-38","tag-exploit","tag-low","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n