CVE-2019-18667

CVE-2019-18667 affects pfSense deployments using the freeradius3 package on FreeBSD. The vulnerability is in /usr/local/www/freeradius_view_config.php and arises from insufficient input validation, enabling a user-supplied XSS payload in password or username fields to execute arbitrary JavaScript...