Threats tagged 'ghsa-4pqv-hw6c-g45v'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.1	EPSS 0.3%	CVE-2025-63420Stored Cross-site Scripting (XSS) Vulnerability Medium4.1EPSS 0.3%2025-11-08GCVE DatabaseCVE-2025-63420 A stored cross-site scripting (XSS) vulnerability exists in the CrushFTP 11.3.7_50 Admin Panel within the Reports section's 'Who Created Folder' feature. This flaw allows authenticated users with folder creation permissions to inject malicious HTML or JavaScript code. EPSS 0.3%Report on CVE-2025-63420 Vulnerability #ghsa-4pqv-hw6c-g45v	GCVE Database	2025-11-08

Page 1 of 1