pfSense-SA-24_04: XSS in pfSense Plus and pfSense CE❗

A vulnerability was discovered in the jquery-treegrid library that could cause arbitrary JavaScript code to be executed in the user's browser.
According to the vendor's advisory, the library is used for testing only and can be safely disabled.

Search at Netlas.io:
👉 Link: https://nt.ls/E5AZ1
👉 Dork: http.title:"pfSense - Login" OR http.title:"pfSense Plus"

Vendor's advisory: https://docs.netgate.com/downloads/pfSense-SA-24_04.webgui.asc