Skip to content
OpenAdvisories

Product · pi-hole

web

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-33405

    Pi-hole has a Stored HTML Injection in queries.js

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, the formatInfo() function in queries.js renders data.upstream, data.client.ip, and data.ede.text into HTML w…

    pi-hole web
  • Low 3.4
    CVE-2026-33404

    Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboard

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, client hostnames and IP addresses from the FTL database are rendered into the DOM without escaping in networ…

    pi-hole web
  • Low 2.0
    CVE-2025-32785

    Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting (XSS) via the Address field in the S…

    pi-hole web