PT-2026-5837 · Unknown · Easy Transfer Wifi Transfer

Publicado 2026-02-03 · Atualizado 2026-02-04 · CVE-2020-37087

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Easy Transfer Wifi Transfer versions 1.7 for iOS

Description A persistent cross-site scripting issue exists in Easy Transfer Wifi Transfer version 1.7 for iOS. Remote attackers can inject malicious scripts by manipulating the oldPath, newPath, and path parameters in the Create Folder and Move/Edit functions. This is due to improper input validation when handling POST requests, allowing for the execution of arbitrary JavaScript within the mobile web application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2020-37087

Produtos afetados

Easy Transfer Wifi Transfer

Referências · 7

• 🔥 https://vulnerability-lab.com/get_content.php?id=2223 · Exploit
• 🔥 https://exploit-db.com/exploits/48395 · Exploit
• https://t.me/CVEtracker/43668 · Publicação no Telegram
• https://t.me/cveNotify/150804 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-37087 · Nota de Segurança
• https://vulncheck.com/advisories/easy-transfer-for-ios-persistent-cross-site-scripting · Nota
• https://apps.apple.com/us/app/easy-transfer-wifi-transfer/id1484667078 · Nota