Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87355
HistoryOct 12, 2022 - 12:00 a.m.

WordPress Simple File List Cross-Site Scripting Vulnerability

2022-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
cross-site scripting
vulnerability
simple file list
php
xss
plugin

0.001 Low

EPSS

Percentile

25.0%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress Simple File List prior to 4.4.12. The vulnerability stems from inadequate clearing and escaping of its settings, which can be exploited by a highly privileged attacker to inject cross-site code and launch XSS attacks.

CPENameOperatorVersion
wordpress simple file listlt4.4.12

0.001 Low

EPSS

Percentile

25.0%