| Package | Affected versions | Patched versions |
|---|---|---|
| ftldns | = 5.7 | |
| pi-hole | = 5.2.4 | |
| web interface | < 5.5 | 5.5 |
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free