Login Request a demo
TF
Product
Tiny File Manager
by Prasathmani · last CVE Feb 3, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 3High 7Medium 6Low 0
Severity
All severities16Critical3High7Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tiny File Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45475
6.5
1%
Nov 25
Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files
Affected: 2.4.8
CVE-2021-40964
6.5
8%
Sep 15
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF…
Affected: through 2.4.6
CVE-2025-44998
6.1
0%
May 23
A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via…
Affected: 2.4.7
CVE-2021-40966
5.4
1%
Sep 15
A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name
Affected: through 2.4.6
CVE-2022-40490
4.8
0%
Feb 6
Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability
Affected: through 2.4.7
CVE-2025-46651
4.3
0%
Feb 3
Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature
Affected: through 2.6
Showing 6