CVE-2019-12347

In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php…

published May 29, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
59%
Percentile
99.1
In the wild
Unconfirmed
What it is

In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. The vulnerability occurs due to input validation errors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.58576 · 99.1th percentile
Published
2019-05-29T18:29Z
EPSS history
Timeline
  • 22 SEP 03:17Z
    EPSS moved 59% → 78%
    epss
  • 06 SEP 03:12Z
    EPSS moved 59% → 78%
    epss
  • 30 AUG 16:01Z
    EPSS moved 78% → 59%
    epss
  • 29 AUG 04:46Z
    EPSS moved 59% → 78%
    epss
  • 29 MAY 18:29Z
    In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php…
    cvelistv5