A local attacker can exploit a vulnerability in Netgate pfSense to perform a Cross-Site Scripting (XSS) attack.