Description
Cross-site scripting (XSS) vulnerability in Accellion Secure File Transfer Appliance before 7_0_296 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not properly handled when the administrator views audit logs.
References
- fta-username-xss(56247) vdb-entry
- http://www.portcullis-security.com/339.php
- 38176 vdb-entry
- 38522 third-party-advisory