CVE-2021-40966

A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and…

published September 15, 2021

CVSS
—
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Published
2021-09-15T17:10Z
EPSS history
Timeline
  • 15 SEP 17:10Z
    A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and…
    cvelistv5