Stored Cross-Site Scripting Vulnerability in File Browser by File Browser

CVE-2025-52902

What is CVE-2025-52902?

The File Browser application, used for file management within specified directories, has a vulnerability in its Markdown preview feature that can lead to Stored Cross-Site Scripting (XSS) attacks. If an attacker uploads a Markdown file containing JavaScript code, that code will be executed in the browser, compromising the security of end users. This vulnerability affects all versions prior to 2.33.7, which addresses the issue and enhances the application's overall security. Users are advised to upgrade to the latest version to mitigate any risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References