All vulnerabilities

Servers and applications

CVE-2022-29273

pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.

Severity
Medium 6.1
Published
22 Feb 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
22.05
Sources
NVD

Affected software

SoftwareAffected versions
pfSenseServers and applications · cpe:a:netgate:pfsense
  • Every version up to 2.6.0
  • Every version before 22.05

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-29273
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-29273