← Back to browse · API

CVE-2024-46538

Severity
CRITICAL
CVSS
9.3
EPSS
0.82259
Risk score
65.99
CISA KEV
No
PoC
No
Published
2024-10-22
Modified
2024-10-22
First seen
2026-08-07
Aliases
EUVD-2024-41866, GHSA-VV26-CPP3-559H
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-41866

Description

A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfaces_groups_edit.php.

References