Medium severity6.1NVD Advisory· Published Sep 9, 2025· Updated Jul 14, 2026
CVE-2025-34172
CVE-2025-34172
Description
In pfSense CE /usr/local/www/haproxy/haproxy_stats.php, the value of the showsticktablecontent parameter is displayed after being read from HTTP GET requests. This can enable reflected cross-site scripting when the victim is authenticated.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- github.com/pfsense/FreeBSD-ports/commit/04d1328ab077830eb57a24bb7018c812b6358c64nvdPatch
- www.vulncheck.com/advisories/netgate-pf-sense-ce-ha-proxy-reflected-xssnvdThird Party Advisory
- redmine.pfsense.org/issues/16411nvdIssue Tracking
News mentions
0No linked articles in our index yet.