{"id":"CVE-2020-26693","details":"A stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of the load_balancer_monitor.php function.","modified":"2026-07-08T16:28:54.475567Z","published":"2021-06-01T15:15:07.553Z","references":[{"type":"FIX","url":"https://github.com/pfsense/pfsense/commit/a220a22a8c05c10a7b875ac6b565f2c4fe7b251c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pfsense/pfsense","events":[{"introduced":"dba74e12841dbc7e92620225b7187c6e19540e87"},{"last_affected":"dba74e12841dbc7e92620225b7187c6e19540e87"},{"fixed":"a220a22a8c05c10a7b875ac6b565f2c4fe7b251c"}],"database_specific":{"cpe":"cpe:2.3:a:pfsense:pfsense:2.4.5:p1:*:*:*:*:*:*","extracted_events":[{"introduced":"2.4.5-p1"},{"last_affected":"2.4.5-p1"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["2.4.5-p1","v2.4.5_1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26693.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}