Beveiligingsadvies

CVE-2021-40966

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-15 17:10:32

Laatst bijgewerkt 2024-08-04 02:59:30

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server.

← Alle CVE's bekijken Bekijk op cve.org ↗