| Package | Affected versions | Patched versions |
|---|---|---|
| crushftp | ≥ 11.0.1, < 11.3.7_57 | 11.3.7_57 |
CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execution in admin sessions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free