Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.