Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-3062

Simple File List < 4.4.12 - Reflected Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Simple File List

  • 4.4.12 to < 4.4.12affected

References