| Package | Affected versions | Patched versions |
|---|---|---|
| pfsense plus | ≤ 21.05 | |
| pfsense | ≤ 2.5.2 |
Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a remote attacker to inject an arbitrary script via a malicious URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free