Security Advisory

CVE-2020-27735

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-20 22:56:37
Last updated 2024-08-04 16:18:45
Assigner mitre
State PUBLISHED

Description

An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of (sandboxed) arbitrary HTML and JavaScript in the users browser.