UpHeron
All vulnerabilities

Servers and applications

CVE-2023-40047

In WS_FTP Server version prior to 8.8.2, a stored cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads.  Once the cross-site scripting payload is successfully stored,  an attacker could leverage this vulnerability to target…

Severity
Medium 4.8
Published
27 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
8.8.2
Sources
NVD

Affected software

SoftwareAffected versions
WS_FTP ServerServers and applications · cpe:a:progress:ws_ftp_server
  • Every version before 8.8.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-40047
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-40047