CVE-2011-5047

Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.

Date published : 2012-01-03

http://www.securityfocus.com/bid/51169

http://blog.pfsense.org/?p=633