Unrated severityNVD Advisory· Published Nov 7, 2025· Updated Nov 10, 2025
CVE-2025-63420
CVE-2025-63420
Description
CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execution in admin sessions.
Affected products
2- CrushFTP/CrushFTPdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.