Advisories · Technology

FileOrganizer.

Every CVE that names FileOrganizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85081 CVE record

CVSS 7.5 High

Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
- File Manager
- FileOrganizer
- Cross-site scripting (XSS)
Not analysed yet 26 Sept 2026
CVE-2026-6382 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Multiple elFinder Plugins - Authenticated OS Command Injection
- FileOrganizer
- Advanced File Manager
Not analysed yet 6 Jul 2026
CVE-2026-11962 CVE record

CVSS 8.8 High

FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload via elFinder File Operations
- FileOrganizer
Not analysed yet 6 Jul 2026
CVE-2023-3664 CVE record

CVSS 7.2 High

FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access
- FileOrganizer
Not analysed yet 25 Sept 2023