Servers and applications
CVE-2020-10797
An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.
- Severity
- Medium 6.1
- Published
- 29 Apr 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.4.5
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
pfSenseServers and applications · cpe:a:netgate:pfsense |
|