Medium severityNVD Advisory· Published Feb 3, 2026· Updated Apr 15, 2026

CVE-2020-37087

Description

Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input validation via POST requests to execute arbitrary JavaScript in the context of the mobile web application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Easy Transfer/Easy Transferllm-create
Range: =1.7

Patches

Vulnerability mechanics

References

apps.apple.com/us/app/easy-transfer-wifi-transfer/id1484667078nvd
www.exploit-db.com/exploits/48395nvd
www.vulncheck.com/advisories/easy-transfer-for-ios-persistent-cross-site-scriptingnvd
www.vulnerability-lab.com/get_content.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000