Threats tagged 'ghsa-2wmf-f2cc-qq97'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34309IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34309 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the SERVICE, LOGIN, and PASSWORD parameters when creating or editing a Dynamic DNS host. Injected scripts execute in the context of other users who view or edit these entries, potentially leading to session hijacking or other client-side impacts. Report on CVE-2025-34309 Vulnerability CWE-79 #ghsa-2wmf-f2cc-qq97	GCVE Database	2025-10-28

Page 1 of 1