Wing · Wing Ftp Server · CVE-2010-2428
**Name of the Vulnerable Software and Affected Versions**
Wing FTP Server for Windows versions 3.5.0 and earlier
**Description**
A cross-site scripting (XSS) issue exists in the Administrator web interface, specifically in the admin loginok.html file. This allows remote attackers to inject arbitrary web script or HTML via a crafted POST request.
**Recommendations**
For versions 3.5.0 and earlier, update to a version later than 3.5.0 to resolve the issue.