CVE-2021-25278

4.8 mediumEPSS 0.6%

Medium (4.8) in ftapi ftapi. EPSS 0.6% chance of exploitation in the next 30 days.

FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor.

Severity

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-03-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19