CVE-2024-50352: medium-severity vulnerability in librenms

LibreNMS allows authenticated users to inject malicious code into the Services section, which gets stored and executed in other users' browsers when they view the page. This could let attackers steal session data or perform actions as other users.

Stored XSS vulnerability in the Services page of Device Overview exists in the 'name' parameter when adding a service. An authenticated attacker can inject arbitrary JavaScript that persists in the database and executes in victims' browsers with their privileges, potentially leading to session hijacking or unauthorized device management actions.