CVE-2025-63419 | CrushFTP 11.3.6_48 File Sharing emailbody cross site scripting

November 12, 2025 Yanac

A vulnerability was found in CrushFTP 11.3.6_48. It has been declared as problematic. This issue affects some unknown processing of the component File Sharing. The manipulation of the argument emailbody results in cross site scripting.

This vulnerability is identified as CVE-2025-63419. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More