PandoraFMS 742 suffers from multiple XSS vulnerabilities affecting the Agent Management Report Builder and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content.