4 matches found
CVE-2025-63419: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in CrushFTP 11.3.648. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection...
6.1CVSS5.8AI score0.00234EPSS
SaveExploits1References1
EUVD-2020-14551
Malware in sbrugna...
6.1CVSS7.9AI score0.00689EPSS
SaveExploits1References2
CVE-2020-21783
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
6.1CVSS6.3AI score0.00689EPSS
SaveExploits1References1
CVE-2020-21783: Improper Neutralization of Input During Web Page Generation
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
6.1CVSS5.1AI score0.00689EPSS
SaveExploits1References2
20