CVE-2020-15902

Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.