FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.

Published Mar 19, 2021 · Updated Aug 3, 2024 · Assigned by mitre