description: Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.
problem types: Cross Site Scripting
affected:
{
product: Nagios XI
vendor: Nagios
versions:
status: affected, version: 5.5.6
}