Frams · Frams' Fast File Exchange · CVE-2012-0869
**Name of the Vulnerable Software and Affected Versions**
Frams' Fast File EXchange (F*EX, aka fex) versions prior to 20120215
**Description**
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `id` parameter. This can lead to the execution of malicious scripts on the client-side.
**Recommendations**
For versions prior to 20120215, update to version 20120215 or later to resolve the issue. As a temporary workaround, consider restricting access to the `id` parameter in the affected API endpoint until the issue is resolved.