CVE-2025-45160 — A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, the application reflects the submitted filename back into — CVE Database · The Intelligence Room