CVE-2022-3062CWE-79

Simple File List < 4.4.12 - Reflected Cross-Site Scripting

Medium · published September 26, 2022

CVSS v3.1

6.1

EPSS

44%

Percentile

98.8

In the wild

Unconfirmed

What it is

The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

The record

Technical detail

CVSS v3.1: 6.1 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.44095 · 98.8th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2022-09-26T12:35Z

EPSS history

Timeline

26 SEP 12:35Z
Simple File List < 4.4.12 - Reflected Cross-Site Scripting
cvelistv5