Vulnerabilities > Opnsense > Opnsense > 23.7

DATE CVE VULNERABILITY TITLE RISK
2023-09-28 CVE-2023-44275 Cross-site Scripting vulnerability in Opnsense
OPNsense before 23.7.5 allows XSS via the index.php column_count parameter to the Lobby Dashboard.
network
low complexity
opnsense CWE-79
5.4
5.4
2023-09-28 CVE-2023-44276 Cross-site Scripting vulnerability in Opnsense
OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard.
network
low complexity
opnsense CWE-79
5.4
5.4