medium6.1
CVE-2020-36502
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to e…
Impact
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Swiftfiletransfer | Swift File Transfer | Version 1.1.2 |