Alexusmai vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Alexusmai products: 3 record(s), with severity, exploitation and fixes.

Laravel File Manager 3

Exploited only (KEV) →

CVE-2025-65346 Critical · 9.1 CWE-22 Dec 4, 2025

Path Traversal in Alexusmai Laravel File Manager

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.

CVE-2025-65345 Medium · 6.5 CWE-22 Dec 3, 2025

Path Traversal in Alexusmai Laravel File Manager

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.

CVE-2025-63307 High · 8.1 CWE-79 Nov 6, 2025

Cross-site Scripting (XSS) in Alexusmai Laravel File Manager

alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization.