← Database

CVE-2026-30579

MEDIUM CVSS: 6.5 Published: 2026-03-20 Modified: 2026-06-17

Description

File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "upload file" functionality to upload a file with a crafted file name used to trigger a Javascript payload.

Affected Platforms

Leefish File Thingie

Weakness Type

CWE-79

References