CVE-2021-25277: Ftapi

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.

Affected products

• Ftapi Ftapi: from 4.0, up to and including 4.10

Published 2021-03-19. Last modified 2026-06-17.