CVE-2021-3816

MEDIUM · CVSS 5.4 EPSS 0.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-01-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-3816

Severity

MEDIUM

CVSS

5.4

EPSS

0.53%

Original NVD Description

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.