CVE-2022-23993

/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $REQUEST'pkgfilter' in a PHP echo call, causing XSS...

PT-2022-16394

Name of the Vulnerable Software and Affected Versions pfSense CE versions prior to 2.6.0 pfSense Plus versions prior to 22.01 Description The issue is related to the use of $ REQUEST'pkg filter' in a PHP echo call within the /usr/local/www/pkg.php file, leading to a potential XSS issue...