CVE-2021-25277

FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component

published March 19, 2021

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00817 · 56.7th percentile
Published
2021-03-19T16:39Z
EPSS history
Timeline
  • 19 MAR 16:39Z
    FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component
    cvelistv5