description: Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
problem types: Cross-site Scripting (XSS) - Stored (CWE-79)
affected:
{
product: http-file-server
vendor: http-file-server
versions:
status: affected, version: Not Fixed
}