CVE-2022-40359

KVE-2022-40359 details a Cross-Site Scripting (XSS) vulnerability in Kae's File Manager (kfm) up to version 1.4.7. An attacker can exploit a crafted GET request to /kfm/index.php to inject script in the victim’s browser. Consequences include potential cookie-based credential theft and other brows...