CVE-2022-29273: Netgate Pfsense

Medium severity, CVSS 6.1. EPSS: 59.6% chance of exploitation in the next 30 days.

pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.

Affected products

• Netgate Pfsense: up to and including 2.6.0; before 22.05 (fixed in 22.05)

Published 2023-02-22. Last modified 2026-06-17.