Log in Start free

TAGFREE

Products

ProductCVEsExploitedLatest
X-Free Uploader2–Aug 7, 2025

Exploited and recent CVEs

  • CVE-2025-29866 High 8.8 : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 0.4%
  • CVE-2025-29865 High 8.7 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 0.5%