Apache Cordova File Transfer — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Cordova File Transfer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2014-0072 — CVSS 7.5 (high): ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the…
• CVE-2015-5204 — CVSS 4.3 (medium): CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows…