Alexusmai vulnerabilities
We track 2 vulnerabilities in Alexusmai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 4, 2025.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Alexusmai vulnerabilities
- 9.1 Critical severity
Laravel File Manager: Improper Limitation of a Pathname to a Restricted Directory
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths
- 8.1 High severity
Laravel File Manager: Improper Neutralization of Input During Web Page Generation
alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output