Vulnerabilities > Netgate > Low

DATE CVE VULNERABILITY TITLE RISK
2021-07-12 CVE-2020-19203 Cross-site Scripting vulnerability in Netgate Pfsense
An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier.
network
netgate CWE-79
3.5
2021-07-12 CVE-2020-19201 Cross-site Scripting vulnerability in Netgate Pfsense
A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php, a page in the pfSense software WebGUI, on Netgate pfSense version 2.4.4-p2 and earlier.
network
netgate CWE-79
3.5
2020-04-01 CVE-2020-11457 Cross-site Scripting vulnerability in Netgate Pfsense
pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.
network
netgate CWE-79
3.5