CVE-2026-47790
CVE-2026-47790 · Privilege Escalation via QuFTP Log-based XSS
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP Service 1.5.5 and later QuFTP Service 1.6.5 and later
CVSS 6.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
quftp service
- Versions
- ≥ 1.4.x, < 1.4.6: Affected (custom)
- ≥ 1.5.x, < 1.5.5: Affected (custom)
- ≥ 1.6.x, < 1.6.5: Affected (custom)
Update to 1.4.6; Update to 1.5.5; Update to 1.6.5