| Package | Affected versions | Patched versions |
|---|---|---|
| tiny file manager | ≤ 2.4.6 |
A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free