CVE-2020-19202

The CVE-2020-19202 entry applies to IPFire 2.21 (x86_64) with Core Update 130. Affected component is the captive.cgi Captive Portal, where the Title of Login Page or the TITLE parameter enables an authenticated WebGUI user to perform a Stored XSS in the Captive Portal page. Root cause is input ha...

CVE-2020-19202

An authenticated Stored XSS Cross-site Scripting exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 x8664 - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored Cross-site Scripting in the...