| Package | Affected versions | Patched versions |
|---|---|---|
| pfsense | < 2.4.5 | 2.4.5 |
An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free