Threats tagged 'ghsa-vfqw-p79c-pfc5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34310IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34310 IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via specific parameters when updating Quality of Service (QoS) settings. The injected scripts execute in the context of other users who view the affected QoS entries, potentially leading to information disclosure or session manipulation. Report on CVE-2025-34310 Vulnerability CWE-79 #ghsa-vfqw-p79c-pfc5	GCVE Database	2025-10-28

Page 1 of 1