Threats tagged 'ghsa-mwgc-wqw6-8hcp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34306IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34306 IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the pienumber parameter when updating default firewall IP search values. The injected script executes in the context of other users viewing the affected page due to improper sanitization of the stored parameter. Report on CVE-2025-34306 Vulnerability CWE-79 #ghsa-mwgc-wqw6-8hcp	GCVE Database	2025-10-28

Page 1 of 1