Medium severity6.4NVD Advisory· Published Feb 1, 2026· Updated Apr 15, 2026

CVE-2022-50951

Description

WiFi File Transfer 1.0.8 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through file and folder names. Attackers can exploit the web server's input validation weakness to execute arbitrary JavaScript when users preview infected file paths, potentially compromising user browser sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dooblou/WiFi File Transferllm-create
Range: = 1.0.8

Patches

Vulnerability mechanics

References

play.google.com/store/apps/detailsnvd
www.vulncheck.com/advisories/wifi-file-transfer-persistent-xss-via-web-server-input-validationnvd
www.vulnerability-lab.com/get_content.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000