Low severity3.0NVD Advisory· Published Sep 12, 2023· Updated Jun 17, 2026

CVE-2023-37875

Description

Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: <= 7.2.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wftpserver/Wing FTP Server
cpe:2.3:a:wftpserver:wing_ftp_server:*:*:*:*:*:*:*:*
Range: <=7.2.0
Wing FTP/Wing FTP Serverllm-fuzzy
Range: <=7.2.0
Wing FTP Server/Wing FTP Servercpe-rescue
Range: <= 7.2.0

Patches

Vulnerability mechanics

References

www.wftpserver.com/serverhistory.htmnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.195
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000