CVE-2026-30578

File Thinghie 2.5.7 is vulnerable to Cross Site Scripting XSS. A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript code...

PT-2026-26646

CVE-2026-30578 File Thinghie 2.5.7 is vulnerable to Cross Site Scripting XSS. A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript c… https://t.co/280mfkh6c3...

CVE-2026-30578

CVE-2026-30578 : The Connected documents confirm a stored/reflected Cross Site Scripting (XSS) in File Thinghie 2.5.7. The flaw is triggered via the GET parameter “dir,” allowing an attacker to inject arbitrary JavaScript code. Affected product: File Thinghie, version 2.5.7. Root cause: unsanitiz...

CVE-2026-30578

File Thinghie 2.5.7 is vulnerable to Cross Site Scripting XSS. A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript code...