CVE-2022-40490: Prasathmani Tiny File Manager

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file.

Affected products

• Prasathmani Tiny File Manager: up to and including 2.4.7

Published 2025-02-06. Last modified 2026-06-17.