Pi-hole vulnerabilities
38 CVEs and advisories name Pi-hole as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-41175Stored XSS in Client Groups Management (Authenticated)
- CVE-2021-3812Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte
- CVE-2021-3811Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte
- CVE-2021-3706Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte
- CVE-2021-32793Stored XSS Vulnerability in the Pi-hole Webinterface
- CVE-2021-32706(Authenticated) Remote Code Execution Possible in Web Interface 5.5
- CVE-2021-29448Stored DOM XSS in Pi-hole Admin Web Interface
- CVE-2021-29449Multiple Privilege Escalation Vulnerabilities Pihole