CVE-2019-8953

score

<0.1

cvss

6.1

epss

52.2%

published

2019-02-20

kev added

—

first seen

2026-10-21

HAProxy before 0.59_16 for pfSense contains a reflected cross-site scripting caused by unsanitized input in the desc or table_actionsaclN parameter in haproxy_listeners.php and haproxy_listeners_edit.php, letting attackers execute malicious scripts in the context of the affected web page, exploit requires attacker to craft a malicious request.