medium6.3
CVE-2025-50927
A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to execute arbitrary J…
Impact
A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via injecting a crafted payload into the ftpusername parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ehcp | Easy Hosting Control Panel | Version 20.04.1.b |