In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. The vulnerability occurs due to input validation errors.
CPE | Name | Operator | Version |
---|---|---|---|
freebsd-ports | eq | devel_before_hashes_changed | |
freebsd-ports | eq | END-OF-2015Q4 |