| Package | Affected versions | Patched versions |
|---|---|---|
| tiny file manager | ≤ 2.4.6 |
A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free