On the Login page of Rumpus FTP Web File Manager 8.2.9.1, a Reflected Cross-Site Scripting vulnerability exists. An attacker can utilise it to execute arbitrary JavaScript by sending a specially crafted link to end-users.
Recommendation
Update Rumpus FTP Web File Manager to the latest version.
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days