Threats tagged 'ghsa-xm48-7mjf-v22c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34308IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34308 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the UPDATE_VALUE parameter when updating time synchronization settings. The injected script executes in the context of other users who view the affected Time Server configuration page. Report on CVE-2025-34308 Vulnerability CWE-79 #ghsa-xm48-7mjf-v22c	GCVE Database	2025-10-28

Page 1 of 1