Security Advisory

CVE-2026-27948

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-26 01:32:15
Last updated 2026-02-26 15:07:56
Assigner GitHub_M
State PUBLISHED

Description

Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scripting via URL-parameter `?setck=...`. Version 1.20.9 fixes the issue.