Vulnerability Details CVE-2020-36486
Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2020-36486
-
cpe:2.3:a:swiftfiletransfer:swift_file_transfer:1.1.2
-
cpe:2.3:o:apple:iphone_os:-
-
cpe:2.3:o:blackberry:blackberry_os:-
-
cpe:2.3:o:google:android:-