CVEDB API

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 2.2%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2024-54779

Netgate » Pfsense Ce » Version: Any

cpe:2.3:a:netgate:pfsense_ce:*
Netgate » Pfsense Plus » Version: N/A

cpe:2.3:a:netgate:pfsense_plus:-
Netgate » Pfsense Plus » Version: 21.02

cpe:2.3:a:netgate:pfsense_plus:21.02
Netgate » Pfsense Plus » Version: 21.02.2

cpe:2.3:a:netgate:pfsense_plus:21.02.2
Netgate » Pfsense Plus » Version: 21.05

cpe:2.3:a:netgate:pfsense_plus:21.05
Netgate » Pfsense Plus » Version: 21.05.1

cpe:2.3:a:netgate:pfsense_plus:21.05.1
Netgate » Pfsense Plus » Version: 21.05.2

cpe:2.3:a:netgate:pfsense_plus:21.05.2
Netgate » Pfsense Plus » Version: 22.01

cpe:2.3:a:netgate:pfsense_plus:22.01
Netgate » Pfsense Plus » Version: 22.05

cpe:2.3:a:netgate:pfsense_plus:22.05
Netgate » Pfsense Plus » Version: 22.05.1

cpe:2.3:a:netgate:pfsense_plus:22.05.1
Netgate » Pfsense Plus » Version: 23.01

cpe:2.3:a:netgate:pfsense_plus:23.01
Netgate » Pfsense Plus » Version: 23.05

cpe:2.3:a:netgate:pfsense_plus:23.05
Netgate » Pfsense Plus » Version: 23.05.1

cpe:2.3:a:netgate:pfsense_plus:23.05.1
Netgate » Pfsense Plus » Version: 23.09

cpe:2.3:a:netgate:pfsense_plus:23.09