Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-40490
4.8
MEDIUMCVSS v3
Published
February 6, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.
prasathmani/tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager= *, <= 2.4.7NVD