← All advisories

Medium severity6.1NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-22910

CVE-2024-22910

Description

Cross Site Scripting (XSS) vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Crushftp/Crushftp3 versions
cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*range: <10.6.1
- (no CPE)
- (no CPE)range: 10.6.0, 10.5.5

Patches

Vulnerability mechanics

References

1

gist.github.com/cgnl/672ace3cbad1116fcd9ae633e54ea9f8nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.