Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2021-29448

Stored DOM XSS in Pi-hole Admin Web Interface

Description

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pi-hole AdminLTE

  • <= 5.4affected

References