Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-2356

User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload

Description

The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Frontend File Manager & Sharing – User Private Files

  • 1.1.3 to < 1.1.3affected

References