CVE-2023-40045 (published 2023-09-27T14:49:45.334Z)



In WS_FTP Server versions prior to 8.7.4 and 8.8.2,

 a reflected cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Ad Hoc Transfer module.  An attacker could leverage this vulnerability to target WS_FTP Server users with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.


Affected products: Vendor: Progress Software Corporation
Product: WS_FTP Server
Versions: 8.8.0, 8.7.0