stored XSS in config values
Affected packages
pmg-gui
Details
The HTTP proxy setting dialogue in the web interface was susceptible to XSS. Editing this setting is only available to users with admin level access.
A related issue in the Proxmox VE code base was discovered and reported by Javidan Khankishiyev <[email protected]>.
Fixed in
pmg-gui >= 4.2.1
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.