https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-36502.htmlhttps://patchthecve.com/cve/CVE-2020-36502.htmlWed, 17 Jun 2026 03:15:36 +0000MEDIUM 6.1: Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself.https://patchthecve.com/cve/CVE-2020-36486.htmlhttps://patchthecve.com/cve/CVE-2020-36486.htmlWed, 17 Jun 2026 03:15:34 +0000MEDIUM 6.1: Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling.https://patchthecve.com/cve/CVE-2020-23038.htmlhttps://patchthecve.com/cve/CVE-2020-23038.htmlWed, 17 Jun 2026 03:04:29 +0000HIGH 7.5: Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables.