CVE-2019-18667: Pfsense Pfsense-Pkg-FREERADIUS3

Medium severity, CVSS 6.1. EPSS: 4% chance of exploitation in the next 30 days.

/usr/local/www/freeradius_view_config.php in the freeradius3 package before 0.15.7_3 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript code on a victim browser.

Affected products

• Pfsense Pfsense-Pkg-FREERADIUS3: before 0.15.7_3 (fixed in 0.15.7_3)

Published 2019-11-02. Last modified 2026-06-17.