Back to the CVE list
CVE-2025-63307

Cross-site scripting in Alexusmai Laravel File Manager

CVSS score

8.1

EPSS probability

%0.4

Risk score

0.0

Published

1 y ago

OverviewPublic Exploits (2)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Theethat-Thamwasin/CVE-2025-63307
GitHub

An authenticated Stored Cross-site Scripting (XSS) vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitrary JavaScript code in uploaded or created files.

Public PoCSource updated: 05.11.2025 14:39:42
G
Theethat-Thamwasin/CVE-2025-63307/blob/main/POC-CVE-63307.md
GitHub

https://github.com/Theethat-Thamwasin/CVE-2025-63307/blob/main/POC-CVE-63307.md

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-63307"