CVE-2026-32577 Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
Frontend File Manager 23.6	earliest → 23.6	No fix stated

Other CVEs of Frontend File Manager

The 6 CVEs of Frontend File Manager →

CVE-2026-25005 Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager… 5.3 Medium CVE-2025-64265 Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting… 4.3 Medium CVE-2025-57921 Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting… 5.3 Medium CVE-2025-27358 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File… 4.6 Medium