Threats tagged 'ghsa-j88j-vmpg-h7r3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34314IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34314 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows authenticated users to inject arbitrary JavaScript via the SRC, DST, and COMMENT parameters when creating time constraint rules. The injected scripts execute in the context of other users viewing the affected entries, due to improper input sanitization and encoding in the web interface. Report on CVE-2025-34314 Vulnerability CWE-79 #ghsa-j88j-vmpg-h7r3	GCVE Database	2025-10-28

Page 1 of 1