pfsense-rss-body-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-rss-body-xss pfsense-rss-body-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org 2604 encodes the title. Body is striptags only. Permalink is raw href. | ---|--- ID| no CVE yet...

CVE-2014-4687

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...

CVE-2014-4687: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...