CVE-2021-25277
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.
Published: 2021-03-19 · CVSS: Unscored
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7