ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-37087”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-37087
Published
2026-02-03
CVSS:
5.1
ShadowTrackr CVSS:
1.2
Summary:
Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input validation via POST requests to execute arbitrary JavaScript in the context of the mobile web application.