Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Mirantis reveals Lens Prism, an AI copilot for operating Kubernetes clusters

      July 3, 2025

      Avoid these common platform engineering mistakes

      July 3, 2025

      Full-Stack Techies vs Toptal: Which Is Better for React.js Outsourcing?

      July 3, 2025

      The AI productivity paradox in software engineering: Balancing efficiency and human skill retention

      July 2, 2025

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025

      Capcom reports that its Steam game sales have risen massively — despite flagship titles like Monster Hunter Wilds receiving profuse backlash from PC players

      July 3, 2025

      Cloudflare is fighting to safeguard “the future of the web itself” — standing directly in the way of leading AI firms

      July 3, 2025

      Microsoft reportedly lacks the know-how to fully leverage OpenAI’s tech — despite holding IP rights

      July 3, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      PHP 8.5.0 Alpha 1 available for testing

      July 3, 2025
      Recent

      PHP 8.5.0 Alpha 1 available for testing

      July 3, 2025

      Recording cross browser compatible media

      July 3, 2025

      Celebrating Perficient’s Third Databricks Champion

      July 3, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025
      Recent

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025

      Capcom reports that its Steam game sales have risen massively — despite flagship titles like Monster Hunter Wilds receiving profuse backlash from PC players

      July 3, 2025

      Cloudflare is fighting to safeguard “the future of the web itself” — standing directly in the way of leading AI firms

      July 3, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-27358 – mndpsingh287 Frontend File Manager Basic XSS Vulnerability

    CVE-2025-27358 – mndpsingh287 Frontend File Manager Basic XSS Vulnerability

    July 4, 2025

    CVE ID : CVE-2025-27358

    Published : July 4, 2025, 9:15 a.m. | 2 hours, 37 minutes ago

    Description : Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in mndpsingh287 Frontend File Manager allows Code Injection. This issue affects Frontend File Manager: from n/a through 23.2.

    Severity: 4.6 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-28951 – CreedAlly Bulk Featured Image Unrestricted File Upload Vulnerability
    Next Article CVE-2025-24748 – LambertGroup All In One Slider Responsive SQL Injection

    Related Posts

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-24748 – LambertGroup All In One Slider Responsive SQL Injection

    July 4, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-28951 – CreedAlly Bulk Featured Image Unrestricted File Upload Vulnerability

    July 4, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Our next-generation model: Gemini 1.5

    Artificial Intelligence

    Raspberry Pi 5 Desktop Mini PC: Increase Swap Memory Size

    Linux

    CVE-2025-1331 – IBM CICS TX Buffer Overflow Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-37796 – “Linux Kernel WiFi at76c50x Use After Free”

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2025-5868 – RT-Thread Array Index Validation Vulnerability

    June 9, 2025

    CVE ID : CVE-2025-5868

    Published : June 9, 2025, 8:15 a.m. | 1 hour, 23 minutes ago

    Description : A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sys_thread_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation of array index.

    Severity: 8.0 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Fostering An Accessibility Culture

    April 17, 2025

    CVE-2025-46614 – Snowflake ODBC Driver Information Disclosure

    April 28, 2025

    CVE-2025-6321 – PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability

    June 20, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.