CVE-2022-40490: XSS
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-40490?
CVE-2022-40490 is considered a high severity vulnerability due to its potential for executing arbitrary code via Cross Site Scripting.
How do I fix CVE-2022-40490?
To fix CVE-2022-40490, upgrade Tiny File Manager to version 2.4.8 or later where the vulnerability has been addressed.
What types of attacks can CVE-2022-40490 facilitate?
CVE-2022-40490 can facilitate attacks such as arbitrary code execution and data theft through Cross Site Scripting.
Which versions of Tiny File Manager are affected by CVE-2022-40490?
CVE-2022-40490 affects Tiny File Manager versions 2.4.7 and below.
Is user input exploited in CVE-2022-40490?
Yes, CVE-2022-40490 exploits user input through crafted payloads injected into file names.