PT-2025-44162

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 Core Update 198 Description IPFire versions prior to 2.29 Core Update 198 are susceptible to a stored cross-site scripting XSS issue. An authenticated attacker can inject arbitrary JavaScript code through the IGNO...

IPFire has multiple vulnerabilities

IPFire is a free Linux-based firewall. Cross-site scripting and remote code execution vulnerabilities exist in versions of IPFire prior to 2.17. An attacker could exploit these vulnerabilities to steal cookie-based authentication or execute arbitrary commands in an affected application...