Threats tagged 'ghsa-h3pc-5wwp-5r96'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34301IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34301 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability in the COUNTRY_CODE parameter when creating a location group. An authenticated attacker can inject arbitrary JavaScript code that is stored and later executed in the context of other users viewing the affected page. This occurs because the parameter value is not properly sanitized or encoded before rendering in the web interface. Report on CVE-2025-34301 Vulnerability CWE-79 #ghsa-h3pc-5wwp-5r96	GCVE Database	2025-10-28

Page 1 of 1