Cacti versions 0.8.7e and below suffer from multiple cross site scripting vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/89798/cacti-xss.txt
Source: https://packetstormsecurity.com/files/89798/Cacti-Cross-Site-Scripting.html