Description
File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript code.
Medium · 6.5
CVE-2026-30578
EUVD-2026-13732
File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "dir" parameter of the GET request to in…
Published Mar 20, 2026 · Updated Mar 23, 2026 · Assigned by mitre