[MEDIUM] LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment

PKSA-63gx-s9j2-62yc CVE-2026-45694 GHSA-jmqm-f8q4-v7wx

Affected package: librenms/librenms

Affected version: <=26.4.0

Reported by:
GitHub