CVE-2025-63420

CVE-2025-63420 CrushFTP11 の 11.3.757 より前のバージョンは、CrushFTP 管理パネル（レポート / "Who Created Folder"）において保存型 HTML インジェクションの影響を受け、管理者セッションで永続的な HTML 実行が可能になります。 CWE CWE-79 — Improper Neutralization of Input During Web Page Generation クロスサイトスクリプティング CVSS v3.1 基本スコア: 4.1 中 root@kitploit:...

Exploit for CVE-2025-63420

CVE-2025-63420 CrushFTP11 before 11.3.757 is vulnerable to s...

CVE-2025-63420

CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions...

CVE-2025-63420

CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions...

CrushFTP 安全漏洞

CrushFTP is a file transfer server from CrushFTP, Inc. A security vulnerability exists in CrushFTP version 11.3.750, which stems from the Reports/Who Created Folder feature in the Admin Panel not handling input correctly, which could lead to a stored cross-site scripting attack...