Cross site scripting

A stored cross-site scripting XSS vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of the loadbalancermonitor.php function...

CVE-2020-26693

A stored cross-site scripting XSS vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of the loadbalancermonitor.php function...

CVE-2020-26693

A stored cross-site scripting XSS vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of the loadbalancermonitor.php function...

CVE-2020-26693

CVE-2020-26693 affects pfSense 2.4.5-p1 with a stored XSS in load_balancer_monitor.php. An authenticated attacker can inject scripts resulting in arbitrary web-script execution in the web interface. Exploit details are not provided in the connected documents; no explicit remediation is listed her...

PT-2021-11261

Name of the Vulnerable Software and Affected Versions: pfSense version 2.4.5-p1 Description: A stored cross-site scripting XSS issue was found, allowing an authenticated attacker to execute arbitrary web scripts by exploiting the load balancer monitor.php function. Recommendations: For pfSense...

pfSense 跨站脚本漏洞

pfsense is an open source routing and firewall software, customized and developed based on freebsd system. A stored cross-site scripting vulnerability exists in the loadbalancermonitor.php function in pfSense version 2.4.5-p1. An attacker can exploit this vulnerability to execute arbitrary web...

CVE-2020-26693: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of the loadbalancermonitor.php function...

Netgate pfSense Cross-Site Scripting (CVE-2021-27933)

A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the descr parameter in the serviceswoledit.php...

pfSense cross-site scripting vulnerability (CNVD-2021-33242)

pfSense is a set of network firewalls based on FreeBSD Linux. A cross-site scripting vulnerability exists in pfsense version 2.5.0, which stems from not sufficiently sanitizing user-supplied data passed to the serviceswoledit.php script via the Description field. An attacker could exploit this...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

Design/Logic Flaw

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

CVE-2021-27933

CVE-2021-27933 affects pfSense 2.5.0 via an XSS vulnerability in the services_wol_edit.php Description field. Public reports consistently describe a cross-site scripting flaw arising from inadequate input validation/sanitization of the Description parameter, enabling an attacker to inject script ...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

PFSense 2.5.0 Cross Site Scripting

I. VULNERABILITY ------------------------- Store XSS Attacks vulnerabilities in PFSense Version 2.5.0 II. BACKGROUND ------------------------- The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third party free...

PFSense 2.5.0 Cross Site Scripting Vulnerability

I. VULNERABILITY ------------------------- Store XSS Attacks vulnerabilities in PFSense Version 2.5.0 II. BACKGROUND ------------------------- The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third party free...

CVE-2021-27933: Improper Neutralization of Input During Web Page Generation

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

pfSense 跨站脚本漏洞

pfSense is a set of network firewalls based on FreeBSD Linux. A cross-site scripting vulnerability exists in pfsense version 2.5.0, which stems from not sufficiently sanitizing user-supplied data passed to the serviceswoledit.php script via the Description field. An attacker could exploit this...