Vulnerabilities (CVE)

Filtered by vendor Pi-hole Subscribe
Filtered by product Web Interface
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-41175 1 Pi-hole 1 Web Interface 2021-10-28 3.5 LOW 5.4 MEDIUM
Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.
CVE-2021-3811 1 Pi-hole 1 Web Interface 2021-09-28 4.3 MEDIUM 6.1 MEDIUM
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3812 1 Pi-hole 1 Web Interface 2021-09-28 4.3 MEDIUM 6.1 MEDIUM
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')