CVE-2020-10821 (nagios_xi)

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.