FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.
CVSS Score
6.1
EPSS Score
0.003
Published
2021-03-19
FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor.
CVSS Score
4.8
EPSS Score
0.003
Published
2021-03-19