Vulnerabilities > Ipfire > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-10-24 | CVE-2022-36368 | Cross-site Scripting vulnerability in Ipfire Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script. | 4.8 |
| 2021-07-12 | CVE-2020-19204 | Cross-site Scripting vulnerability in Ipfire 2.21 An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. | 5.4 |
| 2021-06-28 | CVE-2020-21142 | Cross-site Scripting vulnerability in Ipfire 2.23 Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi. | 6.1 |
| 2021-06-17 | CVE-2020-19202 | Cross-site Scripting vulnerability in Ipfire 2.21 An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 (x86_64) - Core Update 130. | 5.4 |