CVE-2022-37731: Ftcms

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to trigger malicious code when accessing.

Affected products

• Ftcms Ftcms: version 2.1 only

Published 2022-09-07. Last modified 2026-06-17.