Updatec cacti packages has been released for Debian GNU/Linux 8 LTS

Package : cacti
Version : 0.8.8b+dfsg-8+deb8u7
CVE ID : CVE-2019-11025
Debian Bug : #926700

It was discovered that there were a number of cross-site scripting
vulnerabilities (XSS) in cacti, a web-based front-end for the RRDTool
monitoring tool.

For Debian 8 "Jessie", this issue has been fixed in cacti version
0.8.8b+dfsg-8+deb8u7.

We recommend that you upgrade your cacti packages.