← Database

CVE-2022-40490

MEDIUM CVSS: 4.8 Published: 2025-02-06 Modified: 2026-06-17

Description

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.

Affected Platforms

Prasathmani Tiny File Manager

Weakness Type

CWE-79, CWE-79

References