Threats tagged 'ghsa-wgf6-p7jq-hcq9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34317IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34317 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the TLS_HOSTNAME parameter when adding a new DNS entry. The injected script is stored and later executed in the context of other users who view the affected DNS configuration in the web interface. Report on CVE-2025-34317 Vulnerability CWE-79 #ghsa-wgf6-p7jq-hcq9	GCVE Database	2025-10-28

Page 1 of 1