Description
/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call, causing XSS.
Unscored
CVE-2022-23993
EUVD-2022-28908GHSA-69h6-vqxf-rc54
/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call, causing XS…
Published Jan 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre