A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php.
{ "urgency": "not yet assigned" }