Medium severity6.1NVD Advisory· Published Nov 2, 2019· Updated Jun 17, 2026
CVE-2019-18667
CVE-2019-18667
Description
/usr/local/www/freeradius_view_config.php in the freeradius3 package before 0.15.7_3 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript code on a victim browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:pfsense:pfsense-pkg-freeradius3:*:*:*:*:*:*:*:*Range: <0.15.7_3
- pfSense/freeradius3 packagedescription
- Range: <0.15.7_3
Patches
Vulnerability mechanics
References
1- github.com/pfsense/FreeBSD-ports/commit/30b22b6b0db7b73732a5da346afca66dc244e02anvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.