CVE-2022-42247
03.10.2022, 16:15
pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a file name.
| Vendor | Product | Version |
|---|---|---|
| pfsense | pfsense | 2.5.2 |
𝑥
= Vulnerable software versions
References