CVE-2026-27948

Publication date

2026-02-26 01:32:15

Family

GitHub_M

State

PUBLISHED

Description

Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scripting via URL-parameter `?setck=...`. Version 1.20.9 fixes the issue.