CVE-2024-53457: A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web…

PriorityP338medium5.4CVSS 3.1

AVNACLPRLUIRSCCLILAN

EPSS

42.46%

98.5th percentile

A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
librenms	librenms	>= 24.9.0 < 24.11.0	24.11.0
librenms	librenms	24.9.0 – 24.10.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.