Monitorix before 3.10.1 allows XSS via CGI variables.Referenceshttp://www.monitorix.org/changelog.html