Launchpad.net

CVE 2019-20378

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

See the CVE page on Mitre.org for more details.

References