Unscored CVE-2011-5047 EUVD-2011-4950GHSA-xqf9-v7ff-rf4x

Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web sc…

Published Jan 3, 2012 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.

References

51169 vdb-entry
77981 vdb-entry
pfsense-style-xss(72090) vdb-entry
http://blog.pfsense.org/?p=633
46780 third-party-advisory