Cross site scripting

2021-01-2618:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of (sandboxed) arbitrary HTML and JavaScript in the user’s browser.

CPENameOperatorVersion
wing_ftp_servereq6.4.4

CPE	Name	Operator	Version
	wing_ftp_server	eq	6.4.4

References

wshenk.blogspot.com/2021/01/xss-in-wing-ftps-web-interface-cve-2020.html

www.wftpserver.com/serverhistory.htm