| Package | Affected versions | Patched versions |
|---|---|---|
| crushftp | < 11.3.7_60 | 11.3.7_60 |
Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free