Description
A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via injecting a crafted payload into the ftpusername parameter.
Medium · 6.3
CVE-2025-50927
EUVD-2025-24011GHSA-2v5j-53mv-5vwv
A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to…
Published Aug 8, 2025 · Updated Aug 8, 2025 · Assigned by mitre