medium6.1
CVE-2021-25277
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.
Impact
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ftapi | Ftapi | from 4.0 through 4.10 |