CVE-2026-32577

HighCVSS 7.1

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

13th percentile - higher than 13% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager versions up to 23.6.

An attacker can inject malicious script, potentially leading to data theft or session hijacking.

Update the Frontend File Manager plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS