Lucene search
GoogleOSV:CVE-2020-11457HistoryApr 01, 2020 - 4:15 p.m.
CVE-2020-11457
2020-04-0116:15:27
Google
osv.dev
1
pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pfsense | eq | Root_RELENG_1_2 | |
| pfsense | eq | RELENG_2_2_BETA |
Related
cvelist
cvelist
CVE-2020-11457
2020-04-01 15:47:58
prion
prion
Cross site scripting
2020-04-01 16:15:00
nvd
nvd
CVE-2020-11457
2020-04-01 16:15:27
cve
cve
CVE-2020-11457
2020-04-01 16:15:27
packetstorm
packetstorm
pfSense 2.4.4-P3 User Manager Cross Site Scripting
2020-04-06 00:00:00
exploitdb
exploitdb
pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting
2020-04-06 00:00:00