Unrated severityNVD Advisory· Published Jan 20, 2021· Updated Aug 4, 2024

CVE-2020-27735

Description

An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of (sandboxed) arbitrary HTML and JavaScript in the user's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wing FTP/Wing FTPdescription
Wftpserver/Wing FTP Serverllm-fuzzy
Range: =6.4.4

Patches

Vulnerability mechanics

References

wshenk.blogspot.com/2021/01/xss-in-wing-ftps-web-interface-cve-2020.htmlmitrex_refsource_MISC
www.wftpserver.com/serverhistory.htmmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000