Description

I noticed, your website is very secure.

But you overlooked a flaw XSS

Detail:

1 .Login with demo account.

2 .Go to the link: https://demo.librenms.org/eventlog and click Filter

3 .Use burp suite to block proxy and inject payload in eventtype:

test\%22-alert(document.cookie)//

4 .Check, detect xss

Proof of Concept

Video Poc

https://drive.google.com/file/d/1T87Ujnhd5-Je_LSL2uZOqGP5pNt6KT1A/view?usp=sharing

Impact

This security vulnerability has the potential to steal multiple users' cookies, gain unauthorized access to that user's account through stolen cookies, or redirect the user to other malicious websites...