As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.
{ "binaries": [ { "binary_version": "0.8.8b+dfsg-5ubuntu0.2+esm2", "binary_name": "cacti" } ] }
{ "binaries": [ { "binary_version": "0.8.8f+ds1-4ubuntu4.16.04.2+esm2", "binary_name": "cacti" } ] }
{ "binaries": [ { "binary_version": "1.1.38+ds1-1ubuntu0.1~esm4", "binary_name": "cacti" } ] }
{ "binaries": [ { "binary_version": "1.2.10+ds1-1ubuntu1.1+esm2", "binary_name": "cacti" } ] }
{ "binaries": [ { "binary_version": "1.2.19+ds1-2ubuntu1.1", "binary_name": "cacti" } ] }
{ "binaries": [ { "binary_version": "1.2.26+ds1-1ubuntu0.1", "binary_name": "cacti" } ] }
{ "binaries": [ { "binary_version": "1.2.28+ds1-4ubuntu1", "binary_name": "cacti" } ] }