An unauthenticated cross-site scripting vulnerability in Paessler PRTG Network Monitor allows remote attackers to inject malicious scripts, posing a significant risk to user sessions and data integrity.

This is a cross-site scripting (XSS) flaw classified as CWE-79, triggered by improper neutralization of input within the bodyclass parameter. The CVSS vector of AV:N/AC:L/PR:N/UI:N indicates that the vulnerability is exploitable by an unauthenticated attacker without requiring user interaction.

The vulnerability carries a CVSS score of 7.2, reflecting a high severity risk that could lead to unauthorized script execution in the context of the victim's browser. Successful exploitation may result in session hijacking, unauthorized actions performed on behalf of authenticated administrators, or the theft of sensitive session tokens. This creates a substantial risk of data compromise and potential loss of administrative control over the network monitoring infrastructure.

Immediate Action: Upgrade Paessler PRTG Network Monitor to version 23.3.86.1520 or later as specified in the vendor release history.

Proactive Monitoring: Audit web server access logs for anomalous requests containing script-like characters or suspicious patterns directed at the PRTG interface.

Compensating Controls: Implement a Web Application Firewall (WAF) with strict XSS filtering rules to detect and block malicious payloads targeting the application's input parameters.

Public Exploit Available: No (exploit_available unknown).

Given the high CVSS score and the absence of authentication requirements, this vulnerability presents a critical exposure for any exposed PRTG instance. Security teams should prioritize the update to version 23.3.86.1520 immediately to neutralize the risk of unauthorized script execution. If an immediate patch is not feasible, restrict network access to the PRTG management interface to trusted segments only.