Ftapi

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ftapi records in CISA KEV

No Ftapi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2021-07528 CVE-2021-25277 · GHSA-vjq6-89j4-j5p3

LOW 29

FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00817 Published 2021-03-19 No fix listed CWE-79

TI-2021-07529 CVE-2021-25278 · GHSA-5qmg-7g3q-pxph

LOW 23

FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0056 Published 2021-03-19 No fix listed CWE-79