Medium severity6.1NVD Advisory· Published Apr 12, 2020· Updated Jun 17, 2026
CVE-2020-11704
CVE-2020-11704
Description
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- ProVide/ProVidedescription
Patches
Vulnerability mechanics
References
2- github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Multiple%20Cross-Site-ScriptingnvdExploitThird Party Advisory
- www.provideserver.com/security/nvdVendor Advisory
News mentions
0No linked articles in our index yet.