CVE-2020-14055: Monstaftp Monsta FTP

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.

Affected products

• Monstaftp Monsta FTP: up to and including 2.10.1

Published 2020-07-01. Last modified 2026-06-17.