CVE-2019-19368: Maxum Rumpus

Medium severity, CVSS 6.1. EPSS: 25.9% chance of exploitation in the next 30 days.

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts

Affected products

• Maxum Rumpus: version 8.2.9.1 only

Published 2019-12-16. Last modified 2026-06-17.