PYSEC-2025-240

Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can...

CVE-2023-41471

Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can...

PT-2025-35301

Name of the Vulnerable Software and Affected Versions: copyparty version 1.9.1 Description: A Cross Site Scripting issue exists in copyparty version 1.9.1. A local attacker can execute arbitrary code by using a crafted payload targeting the WEEKEND-PLANS function. Recommendations: Update to a new...

CVE-2023-41471

Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can...

CVE-2023-41471

The copyparty file server (versions before 1.9.2 , including 1.9.1 ) is vulnerable to Cross-Site Scripting (XSS) via the WEEKEND-PLANS function. A local attacker can submit a crafted payload to execute arbitrary code in the context of the affected application. This occurs because the application ...