Skip to content
OpenAdvisories

Vendor

Media Manager

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-14856 Public exploit

    Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager

    A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can upload a malicious S…