CVE-2020-11457

pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user

published April 1, 2020

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09282 · 95.4th percentile
Published
2020-04-01T15:47Z
EPSS history
Timeline
  • 01 APR 15:47Z
    pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user
    cvelistv5