← Database

CVE-2026-34813

MEDIUM CVSS: 6.4 Published: 2026-04-02 Modified: 2026-07-24

Description

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the user parameter to /cgi-bin/proxyuser.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.

Affected Platforms

Endian Firewall Community

Weakness Type

CWE-79

References