Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2021-41175

Stored XSS in Client Groups Management (Authenticated)

Description

Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pi-hole AdminLTE

  • < 5.8affected

References