Skip to content

Vendor

Media Manager vulnerabilities

1 published CVE affecting Media Manager, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Media Manager alerts

Products

Latest Media Manager CVEs

Newest publication first

  1. CVE-2026-14856 Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager

    Published
    MediumCVSS 6.3 EPSS 0.39%

    A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can upload a malicious SVG file containing Ja...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.