An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the \routing.cgi\ Routing Table Entries via the \Remark\ text box or \remark\ parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.