Launchpad.net

CVE 2019-20379

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

See the CVE page on Mitre.org for more details.

References