60
CVE-2024-54779
PoC —CVSS 3.1
5.4 medium
EPSS
8%p95
Published
()
Modified
Description
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php.
- Vendors
- netgate
- Products
- pfsense ce, pfsense plus
- Weakness
- CWE-79
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N