EDB-48300
PoCpfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting
view exploit source exploit_dbtype webappsauthor Matthew Abereggpublished 2020-04-06catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11457US | medium5.4 | Exploit | ||
pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan