CVE-2021-44076

An issue was discovered in CrushFTP 9

published September 15, 2022

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross-Site Scripting (XSS). The payload can be executed in multiple scenarios, for example when the user's page appears in the Most Visited section of the page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00683 · 52.0th percentile
Published
2022-09-15T12:35Z
EPSS history
Timeline
  • 15 SEP 12:35Z
    An issue was discovered in CrushFTP 9
    cvelistv5