https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:06:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-07242 cnvd-2020-07242 https://cve.radiocsirt.org/vuln/cnvd-2020-07242 https://cve.radiocsirt.org/vuln/euvd-2026-36436 EUVD-2026-36436 https://cve.radiocsirt.org/vuln/euvd-2026-36436 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5195 <p>Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This occurs because of the folder_up.png IMG element not properly sanitizing user-inserted directory paths. The path modification must be done on a publicly shared folder for a remote attacker to insert arbitrary JavaScript or HTML. The vulnerability impacts anyone who clicks the malicious link crafted by the attacker.</p> <p>Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This occurs because of the folder_up.png IMG element not properly sanitizing user-inserted directory paths. The path modification must be done on a publicly shared folder for a remote attacker to insert arbitrary JavaScript or HTML. The vulnerability impacts anyone who clicks the malicious link crafted by the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5195 https://cve.radiocsirt.org/vuln/ghsa-fvhj-87pc-qj64 <p>Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This occurs because of the folder_up.png IMG element not properly sanitizing user-inserted directory paths. The path modification must be done on a publicly shared folder for a remote attacker to insert arbitrary JavaScript or HTML. The vulnerability impacts anyone who clicks the malicious link crafted by the attacker.</p> <p>Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This occurs because of the folder_up.png IMG element not properly sanitizing user-inserted directory paths. The path modification must be done on a publicly shared folder for a remote attacker to insert arbitrary JavaScript or HTML. The vulnerability impacts anyone who clicks the malicious link crafted by the attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-fvhj-87pc-qj64 https://cve.radiocsirt.org/vuln/gsd-2020-5195 gsd-2020-5195 https://cve.radiocsirt.org/vuln/gsd-2020-5195