Low · 3.0 CVE-2023-37875 EUVD-2023-41749GHSA-3jq5-7792-2mq3

Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

Published Sep 12, 2023 · Updated Sep 24, 2024 · Assigned by NCSC.ch

Vendor: Wing FTP Server Product: Wing FTP Server

Description

Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: <= 7.2.0.

Affected products

Vendor	Product	Affected	Fixed
Wing FTP Server	Wing FTP Server	<= 7.2.0	—

References

https://www.wftpserver.com/serverhistory.htm