ftcms Cross-Site Scripting Vulnerability in News Edit Functionality

A cross-site scripting vulnerability has been identified in ftcms version 2.1. The issue arises in the news editing functionality of the admin panel, specifically within the file '/admin/index.php/news/edit'. The vulnerability is triggered by manipulating the 'title' argument, and it can be exploited remotely. There is a possibility that other parameters may also be affected.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.