EUVD-2021-14653

Malware in sbrugna...

Netgate pfSense Cross-Site Scripting (CVE-2021-27933)

A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the descr parameter in the serviceswoledit.php...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

Design/Logic Flaw

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

CVE-2021-27933

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

CVE-2021-27933

CVE-2021-27933 affects pfSense 2.5.0 via an XSS vulnerability in the services_wol_edit.php Description field. Public reports consistently describe a cross-site scripting flaw arising from inadequate input validation/sanitization of the Description parameter, enabling an attacker to inject script ...

pfSense 跨站脚本漏洞

pfSense is a set of network firewalls based on FreeBSD Linux. A cross-site scripting vulnerability exists in pfsense version 2.5.0, which stems from not sufficiently sanitizing user-supplied data passed to the serviceswoledit.php script via the Description field. An attacker could exploit this...