FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor.

Published Mar 19, 2021 · Updated Aug 3, 2024 · Assigned by mitre