EDB-46936

PoC

pfSense 2.4.4-p3 (ACME Package 0.59_14) - Persistent Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Chi Tranpublished 2019-05-29catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-12347US	medium6.1	58.6% (99th)	Exploit	2019-05-29
In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. The vulnerability…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.