https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:30:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-43980 EUVD-2026-43980 https://cve.radiocsirt.org/vuln/euvd-2026-43980 https://cve.radiocsirt.org/vuln/fkie_cve-2020-19203 <p>An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output, leading to a possible stored XSS.</p> <p>An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output, leading to a possible stored XSS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-19203 https://cve.radiocsirt.org/vuln/ghsa-4wj2-v574-g827 <p>Netgate pfSense Community Edition 2.4.4 - p2 (arm64) is affected by: Cross Site Scripting (XSS). The impact is: Session Hijacking, Information Leakage (local). The component is: pfSense Dashboard, Work-on-LAN Service configuration. The attack vector is: Inject the malicious JavaScript code in Description text box or parameter.</p> <p>Netgate pfSense Community Edition 2.4.4 - p2 (arm64) is affected by: Cross Site Scripting (XSS). The impact is: Session Hijacking, Information Leakage (local). The component is: pfSense Dashboard, Work-on-LAN Service configuration. The attack vector is: Inject the malicious JavaScript code in Description text box or parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-4wj2-v574-g827 https://cve.radiocsirt.org/vuln/gsd-2020-19203 gsd-2020-19203 https://cve.radiocsirt.org/vuln/gsd-2020-19203