CVE-2024-49758

CVE-2024-49758 is a medium-severity cross-site scripting (XSS) vulnerability affecting LibreNMS, an open-source network monitoring system. An authenticated administrator can inject malicious JavaScript into device notes, which executes when the ExamplePlugin is enabled. The vulnerability has a CVSS score of 4.8, indicating a network-based attack requiring high privileges and user interaction, with potential for low impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.