pfsense-separator-color-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-separator-color-xss pfsense-separator-color-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org displayseparator concatenates $separator'color' into class="..." with no encode...

CVE-2026-111232

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

CVE-2026-111232 Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

CVE-2026-111232

Netgate pfSense CE versions 2.3.0 through 2.9.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists in the separator color field and is triggered because the display_separator() function renders the separator[] color value unencoded into class attributes. This all...

EUVD-2026-102344

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

CVE-2026-111232

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

pfsense-separator-color-xss

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-111232: Improper Neutralization of Input During Web Page Generation

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...