Skip to content
OpenAdvisories

Product · Media Manager

TastyIgniter

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-14856 Public exploit

    Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager

    A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can upload a malicious S…

    Media Manager TastyIgniter