XSS in Media Manager Tastyigniter
CVE-2026-14856
A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Media Manager Tastyigniter — versions 4.3.0
Weakness classification (CWE)
References
- cve-coordination@incibe.es (patch)