4.6
Medium
CVE-2025-27358 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File…
Description
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Code Injection.This issue affects Frontend File Manager: from n/a through <= 23.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Frontend File Manager 23.6 | earliest → 23.6 | No fix stated |
Other CVEs of Frontend File Manager
The 6 CVEs of Frontend File Manager →
CVE-2026-32577
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions
7.1
High
CVE-2026-25005
Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager…
5.3
Medium
CVE-2025-64265
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting…
4.3
Medium
CVE-2025-57921
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting…
5.3
Medium