← Database

CVE-2022-23993

MEDIUM CVSS: 6.1 Published: 2022-01-26 Modified: 2026-06-17

Description

/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call, causing XSS.

Affected Platforms

Pfsense PfsensePfsense Pfsense Plus

Weakness Type

CWE-79

References