CVE-2025-45160

A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, the application reflects the submitted filename back into an error popup without proper sanitization. As a result, attackers can inject arbitrary HTML elements (e.g., <h1>, <b>, <svg>) into the rendered page. NOTE: Multiple third-parties including the maintainer have stated that they cannot reproduce this issue after 1.2.27.

• CWE-80

• https://gist.github.com/BEND0US/49d76897a5bb676d8c3f51425553cc32
• https://github.com/Cacti/cacti

Published

Jan 29, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-45146ModelCache for LLM through v0.2.0 was discovered to contain …9.8
• CVE-2025-4515A vulnerability, which was classified as problematic, was fo…6.5
• CVE-2025-45150Insecure permissions in LangChain-ChatGLM-Webui commit ef829…9.8
• CVE-2025-45156Splashin iOS v2.0 fails to enforce server-side interval rest…5.3
• CVE-2025-45157Insecure permissions in Splashin iOS v2.0 allow unauthorized…6.5
• CVE-2025-4516There is an issue in CPython when using `bytes.decode("unico…5.9
• CVE-2025-4517Allows arbitrary filesystem writes outside the extraction di…9.4
• CVE-2025-4519The IDonate – Blood Donation, Request And Donor Management S…8.8
• CVE-2025-4520The Uncanny Automator plugin for WordPress is vulnerable to …4.3
• CVE-2025-4521The IDonate – Blood Donation, Request And Donor Management S…8.8
• CVE-2025-4522The IDonate – Blood Donation, Request And Donor Management S…6.5
• CVE-2025-4523The IDonate – Blood Donation, Request And Donor Management S…6.5