Security Air Transfer 1.2.1 / 1.0.14 Cross Site Scripting February 23, 2017 007admin Leave a comment Air Transfer versions 1.2.1 and 1.0.14 suffer from multiple cross site scripting vulnerabilities.