2 matches found
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
6.1CVSS6.1AI score0.01042EPSS
SaveExploits0References1
CVE-2017-9783: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
6.1CVSS6.4AI score0.0108EPSS
SaveExploits0References2
20