CVE-2025-34175

The CVE pertains to pfSense CE with Suricata package (suricata_filecheck.php). The vulnerability arises because the filehash parameter is output directly without HTML sanitization, enabling reflected XSS when a user is authenticated. Affected component: /usr/local/www/suricata/suricata_filecheck....