PT-2026-115198

Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall rules.php that allows remote attackers to inject script via the unencoded if parameter. When the non-default Require Firewall Interface option is enabled, attackers can lure users with...

PT-2015-5700

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different PHP files, including status captiveportal.php, firewall rules.php, firewall shaper.php,...