VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 2, 2025· Updated Jun 17, 2026

CVE-2025-54789

CVE-2025-54789

Description

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logic that prevents injection of arbitrary JavaScript, which can lead to Browser JS code execution in the context of the user’s session. This is fixed in version 0.16.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Humhub/Files
    cpe:2.3:a:humhub:files:*:*:*:*:*:*:*:*
    Range: <0.16.10
  • Humhub/Cfilesllm-fuzzy2 versions
    <=0.16.9+ 1 more
    • (no CPE)range: <=0.16.9
    • (no CPE)range: < 0.6.10

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.