Security Advisory

CVE-2020-11457

5.4
MEDIUM

Vulnerability Description

pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.
Published Date April 1, 2020
Official Source NIST NVD Advisory
Browse More Advisories