VUPEN Security Team reported:
multiple cross-site scripting (XSS) flaws, present in Zabbix code.
An attacker could use this flaw to execute arbitrary scripting code.
This issue affects the version of the zabbix package, as shipped
with Fedora release of 13.
Please fix / rebase to Zabbix v1.8.3rc1 / Zabbix v1.8.3rc3 versions.
Created zabbix tracking bugs for this issue
Affects: fedora-13 [bug 620809]
zabbix 1.4.7 was retired and blocked in EPEL 5, as there is no upstream support for this version. This was the only remaining version potentially or actually prone to this issue, thus closing.
Users are encouraged to update to zabbix20 or later.