PT-2015-7272

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the descr parameter in a "new" action to "system authservers.php" API endpoint. Recommendations For...