Cross-Site Scripting Vulnerability in Frontend File Manager by mndpsingh287

CVE-2025-27358

What is CVE-2025-27358?

The Frontend File Manager by mndpsingh287 contains a flaw that allows for the improper neutralization of script-related HTML tags within web pages, leading to a potential code injection vulnerability. This can be exploited by malicious actors to execute arbitrary scripts in the context of the affected user’s browser, potentially compromising sensitive information or user accounts. The issue affects versions from n/a through 23.2, highlighting the importance of updating to secure versions.

References