Security Advisory
CVE-2020-11704
6.1
MEDIUM
Vulnerability Description
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter.
Published Date
April 12, 2020
Official Source
NIST NVD Advisory