CVE-2025-34310

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700...

CVE-2025-34310

IPFire (before 2.29 Core Update 198) is affected by a stored XSS in QoS settings. The vulnerability arises when updating QoS via /cgi-bin/qos.cgi, where INC_SPD, OUT_SPD, DEFCLASS_INC, and DEFCLASS_OUT values are stored and later rendered without proper sanitization, allowing an authenticated use...