CVE-2019-19661: Maxum Rumpus FTP

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp.

Affected products

• Maxum Rumpus FTP: version 8.2.9.1 only

Published 2020-02-10. Last modified 2026-06-17.