| Package | Affected versions | Patched versions |
|---|---|---|
| ftapi | ≥ 4.0, ≤ 4.10 |
FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free