Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-44998
6.1
MEDIUMCVSS v3
Published
May 23, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter.
prasathmani/tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager
GitHubSingle-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager= 2.4.7NVD
