Threats tagged 'ghsa-48rj-4wmq-xq7p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34303IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34303 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the IGNORE_ENTRY_REMARK parameter when adding a whitelisted host. The injected script is stored and later executed in the context of other users viewing the whitelist entry in the web interface. Report on CVE-2025-34303 Vulnerability CWE-79 #ghsa-48rj-4wmq-xq7p	GCVE Database	2025-10-28

Page 1 of 1