Read the docs

Media Manager

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Media Manager records in CISA KEV

No Media Manager vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-12524 CVE-2026-14856 · GHSA-h824-gwx2-93j6

Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager

Priority LOW 28

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files.

CVSS 4.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.0039 Published 2026-07-27 No fix listed CWE-79
Open these records in search →