CrushFTP HTML Injection

CrushFTP before version 11.3.760 contains an HTML injection vulnerability where a shared filename is reflected unsanitized in an email body. The archive includes reproduction details...