Security CrushFTP 7.2.0 Cross Site Request Forgery / Cross Site Scripting February 18, 2015 007admin Leave a comment CrushFTP version 7.2.0 suffers from cross site request forgery and cross site scripting vulnerabilities.