XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
{ "binaries": [ { "binary_name": "nagvis", "binary_version": "1:1.7.10+dfsg1-3ubuntu1" }, { "binary_name": "nagvis-demos", "binary_version": "1:1.7.10+dfsg1-3ubuntu1" } ] }
{ "binaries": [ { "binary_name": "nagvis", "binary_version": "1:1.7.10+dfsg1-3.2" }, { "binary_name": "nagvis-demos", "binary_version": "1:1.7.10+dfsg1-3.2" } ] }
{ "binaries": [ { "binary_name": "nagvis", "binary_version": "1:1.9.30-1" }, { "binary_name": "nagvis-demos", "binary_version": "1:1.9.30-1" } ] }
{ "binaries": [ { "binary_name": "nagvis", "binary_version": "1:1.9.40-1" }, { "binary_name": "nagvis-demos", "binary_version": "1:1.9.40-1" } ] }
{ "binaries": [ { "binary_name": "nagvis", "binary_version": "1:1.9.44-1" }, { "binary_name": "nagvis-demos", "binary_version": "1:1.9.44-1" } ] }