CVE-2021-25278: Ftapi

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor.

Affected products

• Ftapi Ftapi: from 4.0, up to and including 4.10

Published 2021-03-19. Last modified 2026-06-17.