This script is Copyright (C) 2017 Tenable Network Security, Inc.
The remote FreeBSD host is missing a security-related update.
kimiizhang reports :
Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti
1.1.13 allows remote authenticated users to inject arbitrary web
script or HTML via specially crafted HTTP Referer headers.
See also :
Update the affected package.
Risk factor :
Low / CVSS Base Score : 3.5