CVE-2024-54779

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16983...

CVE-2024-54779

Netgate pfSense CE prior to 2.8.0 beta release and corresponding Plus builds is vulnerable to Cross Site Scripting XSS in widgets/log.widget.php...

CVE-2024-54779

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to Cross Site Scripting (XSS) in the widgets/log.widget.php file. The root cause is a lack of security measures protecting the website structure, specifically involving the widgetkey variable , which cou...