Cross site scripting

A cross-site scripting XSS vulnerability in the act parameter of systemcertmanager.php in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-39002

OPNsense XSS (CVE-2023-39002) exists in the act parameter of system_certmanager.php. Affected: Community Edition prior to 23.7 and Business Edition prior to 23.4.2. Description and connected sources confirm an XSS that allows crafting payloads to execute arbitrary scripts/HTML. Practical impact o...