CVE-2026-30579

creationtimestamp| type| source ---|---|--- 2026-03-20 21:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjii2ekok2e...

CVE-2026-30579

CVE-2026-30579 affects File Thingie 2.5.7. The vulnerability is a Cross Site Scripting (XSS) issue triggered via the upload file functionality when a crafted file name is uploaded, causing a Javascript payload to execute. Public sources in the connected documents consistently describe the issue a...