Medium severity6.1NVD Advisory· Published Apr 12, 2020· Updated Jun 17, 2026

CVE-2020-11702

Description

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collaborate is Stored via the displayname parameter. Deletemultiple is Reflected via the files parameter. Share is Reflected via the target parameter. Share is Stored via the displayname parameter. Waitedit is Reflected via the Host header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ProVide/ProVidedescription
Provide/ProVidellm-fuzzy
Range: <=13.1

Patches

Vulnerability mechanics

References

github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Multiple%20Cross-Site-ScriptingnvdExploitThird Party Advisory
www.provideserver.com/security/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000