https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:13:26.784174+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25373 CVE-2019-25373 — OPNsense 19.1 Stored XSS via firewall_rules_edit.php 2026-10-07T17:13:26.800183+00:00

Affected: OPNsense

OPNsense 19.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the category parameter. Attackers can send POST requests to firewall_rules_edit.php with script payloads in the category field to execute arbitrary JavaScript in the browsers of other users accessing firewall rule pages.