CVE-2020-11457

Published: Apr 1, 2020

Modified: Aug 4, 2024

PUBLISHED

pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

x_refsource_MISC

x_refsource_MISC

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.