Medium · 6.1 Scanner template CVE-2022-40359 EUVD-2022-43650GHSA-v2qf-2g23-xmcg

Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php.

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Kae's File Manager <=1.4.7 - Cross-Site Scripting http/cves/2022/CVE-2022-40359.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://code.google.com/archive/p/kfm/downloads
https://cxsecurity.com/issue/WLB-2022090057