Medium · 5.4 CVE-2024-54779 EUVD-2025-15588GHSA-43qr-pjmr-cgfv

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.w…

Published May 14, 2025 · Updated May 20, 2025 · Assigned by mitre

Description

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php.

Advisories 1

WID-SEC-2025-1083 Netgate pfSense: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 18, 2025

References