Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parentid parameter to tree.php and drpaction parameter to data_sources.php.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000032.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "0.8.8b" } ] } ]