CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2020/04/01 4:15 p.m.•28 views

CVE-2020-11457

pfSense before 2.4.5 has stored XSS in systemusermanageraddprivs.php in the WebGUI via the descr parameter aka full name of a user...

5.4CVSS5.3AI score0.09282EPSS

SaveExploits3References4

OSV•added 2020/04/01 4:15 p.m.•15 views

CVE-2020-11457

pfSense before 2.4.5 has stored XSS in systemusermanageraddprivs.php in the WebGUI via the descr parameter aka full name of a user...

5.4CVSS5.8AI score

SaveExploits0References4

Prion•added 2020/04/01 4:15 p.m.•25 views

Cross site scripting

pfSense before 2.4.5 has stored XSS in systemusermanageraddprivs.php in the WebGUI via the descr parameter aka full name of a user...

3.5CVSS5.1AI score0.09282EPSS

SaveExploits3References4Affected Software1

CVE•added 2020/04/01 3:47 p.m.•76 views

CVE-2020-11457

PfSense present a stored XSS (via the descr field) in the WebGUI’s User Manager addprivs flow. Affected product: pfSense prior to 2.4.5; root cause: lack of input validation in system_usermanager_addprivs.php allowing arbitrary script payloads to be stored as a user’s Full Name. Impact: potential...

5.4CVSS5.2AI score0.09282EPSS

SaveExploits3References4Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by