Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.Referenceshttp://artica.comhttp://pandora.comhttps://k4m1ll0.com/chained_exploit_htaccess.html