HTML Injection Vulnerability in FileRise Web File Manager by Error311
CVE-2026-25230

4.6MEDIUM

Key Information:

Vendor: Error311
Status: Filerise
Vendor: CVE Published:; 9 February 2026

What is CVE-2026-25230?

FileRise, a self-hosted web file manager and WebDAV server, contains a vulnerability that allows authenticated users to inject HTML into the Document Object Model (DOM). This flaw enables users to modify page elements, such as adding forms or links that can redirect to other endpoints upon user interaction. This issue has been addressed in version 3.3.0, prompting users to update to this version to mitigate the risk.