CVE-2025-44998 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScri…
Medium CVSS: 6.1

CVE-2025-44998

A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter.
Vendor
Prasathmani
Product
Tiny File Manager
CWE
CWE-79
Yayın Tarihi
2025-05-23 19:15:22
Güncelleme
2025-12-31 19:43:08
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Tiny File Manager MEDIUM Prasathmani 2025

Referanslar

https://github.com/l8BL/CVE-2025-44998 https://github.com/prasathmani/tinyfilemanager