CVE-2021-20729

2022-03-3107:20:29

jpcert

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a remote attacker to inject an arbitrary script via a malicious URL.

CNA Affected

[
  {
    "product": "pfSense CE and pfSense Plus",
    "vendor": "pfSense",
    "versions": [
      {
        "status": "affected",
        "version": "pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier"
      }
    ]
  }
]