CVE-2025-63420 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execut…
Medium CVSS: 4.1

CVE-2025-63420

CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execution in admin sessions.
Vendor
Crushftp
Product
Crushftp
CWE
CWE-79
Yayın Tarihi
2025-11-07 22:15:39
Güncelleme
2026-02-05 16:24:04
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Crushftp MEDIUM Crushftp 2025

Referanslar

https://gist.github.com/MMAKINGDOM/791d264c27656f0a4aa3c0ae35075e70 https://github.com/MMAKINGDOM/CVE-2025-63420/