Ftapi (Ftapi) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2021-03-19. Vendor: Ftapi.

CVEs of Ftapi

• CVE-2021-25278 - CVSS 4.8 (medium), 2021-03-19: FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor.
• CVE-2021-25277 - CVSS 6.1 (medium), 2021-03-19: FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.