Tiny vulnerabilities
We track 2 vulnerabilities in Tiny products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2025.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Tiny vulnerabilities
- 9.4 Critical severity
MoxieManager PHP: Improper Neutralization of Directives in Statically Saved Code
In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.ph
- 8.8 High severity
A no-code page builder for beautiful…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20.