Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63420 1 Crushftp 1 Crushftp 2026-02-05 4.1 Medium
CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execution in admin sessions.