CVE-2024-31443 in Cacti allows for cross-site scripting (XSS) due to insufficient data validation in the form_save() function of data_queries.php. This vulnerability arises because unsanitized data is used to construct HTML in the grow_right_pane_tree() function, potentially enabling attackers to inject malicious scripts into web pages viewed by users. Despite a CVSS score of 5.7, the SOCRadar Vulnerability Risk Score (SVRS) is 30, indicating a lower immediate threat level. However, the XSS vulnerability can still be exploited to steal cookies, redirect users to malicious sites, or deface websites. Users of Cacti should update to version 1.2.27 or later to mitigate this security risk. The fix involves proper sanitization to prevent the injection of arbitrary HTML code. While not immediately critical based on the SVRS, proactive patching is recommended to prevent potential exploitation.