2 matches found
CVE-2014-4687
Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...
6.3CVSS0.01661EPSS
SaveExploits0References1
CVE-2014-4687: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...
4.3CVSS5.9AI score0.01661EPSS
SaveExploits0References2
20