Medium severity6.1NVD Advisory· Published Oct 22, 2021· Updated Jun 17, 2026

CVE-2020-36502

Description

Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself.

Affected products

Swiftfiletransfer/Swift File Transfer
cpe:2.3:a:swiftfiletransfer:swift_file_transfer:1.1.2:*:*:*:*:*:*:*
Swift/File Transfer Mobilecpe-rescue
Swift File Transfer Mobile/Swift File Transfer Mobilellm-create
Range: =1.1.2

Patches

Vulnerability mechanics

References

www.vulnerability-lab.com/get_content.phpnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000