Full title: pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities 
Category: web applications
Platform: php
pfSense version 2.3.2 suffers from cross site request forgery and cross site scripting vulnerabilities that can assist in gaining a reverse-shell remotely as root.

# 0day.today @ http://0day.today/