PT-2015-6391

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.3 Description A cross-site scripting XSS issue exists in the WebGUI, allowing remote attackers to inject arbitrary web script or HTML via the zone parameter in a del action to "services captiveportal zones.php" AP...