CVE-2022-40916: Prasathmani Tiny File Manager

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Tiny File Manager v2.4.7 and below is vulnerable to session fixation.

Affected products

• Prasathmani Tiny File Manager: up to and including 2.4.7

Published 2025-02-06. Last modified 2026-06-17.