medium6.1
CVE-2022-39220
SFTPGo WebClient vulnerable to Cross-site Scripting
Impact
### Impact Cross-site scripting (XSS) vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code. ### Patches Fixed in v2.3.5.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/drakkan/sftpgo | < 2.3.5 | 2.3.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sftpgo Project | Sftpgo | before 2.3.5 |