← Database

CVE-2026-30578

MEDIUM CVSS: 6.5 Published: 2026-03-20 Modified: 2026-06-17

Description

File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript code.

Affected Platforms

Leefish File Thingie

Weakness Type

CWE-79

References