include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15194.json"