CVE-2020-19204: Ipfire

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.

Affected products

• Ipfire Ipfire: version 2.21 only

Published 2021-07-12. Last modified 2026-06-17.