Lucene search
MitreCVELIST:CVE-2021-40966HistorySep 15, 2021 - 5:10 p.m.
CVE-2021-40966
2021-09-1517:10:32
mitre
www.cve.org
1
0.001 Low
EPSS
Percentile
19.5%
A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server.
Related
nvd
nvd
CVE-2021-40966
2021-09-15 18:15:09
prion
prion
Design/Logic Flaw
2021-09-15 18:15:00
cve
cve
CVE-2021-40966
2021-09-15 18:15:09
cnvd
cnvd
TinyFileManager Cross-Site Scripting Vulnerability
2021-09-17 00:00:00