Description
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.
Remediation
References
Related Vulnerabilities
WordPress Plugin Awesome Studio Cross-Site Scripting (1.0.7)
Oracle Application Server CVE-2009-3407 Vulnerability (CVE-2009-3407)
Joomla! Core 2.5.x Denial of Service (2.5.0 - 2.5.9)
Jenkins Improper Handling of Inconsistent Structural Elements Vulnerability (CVE-2021-21640)
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.3)