CVE-2026-30579

creationtimestamp| type| source ---|---|--- 2026-03-20 21:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjii2ekok2e...

CVE-2026-30579

File Thingie version 2.5.7 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of special filenames. An attacker can exploit the "upload file" functionality by uploading a file with a crafted filename to trigger a Javascript payload . No specific remediation or exploit links are ...