Threats tagged 'ghsa-hgvm-2qj6-6j76'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34302IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34302 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the PROT parameter when creating a new service. The injected script executes in the context of other users viewing the affected service entry due to improper sanitization of the stored input. Report on CVE-2025-34302 Vulnerability CWE-79 #ghsa-hgvm-2qj6-6j76	GCVE Database	2025-10-28

Page 1 of 1