LibreNMS's Improper Sanitization on Service template name leads to Stored XSS

LibreNMS, a network monitoring system, fails to properly clean user input in Service template names, allowing attackers to inject malicious code that gets stored and executed in users' browsers when they view the template.

A stored XSS vulnerability exists in LibreNMS versions prior to 24.4.0 due to insufficient input sanitization on the Service template name parameter. An authenticated attacker can inject malicious JavaScript that persists in the database and executes in the context of other users' browsers, potentially leading to session hijacking or credential theft.