Lucene search
HistoryAug 08, 2022 - 2:15 p.m.
CVE-2022-2356
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.0%
The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.
Affected configurations
Node
mediajediuser_private_filesRange<1.1.3wordpress
Related
patchstack
patchstack
cvelist
cvelist
CVE-2022-2356 User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
2022-08-08 13:46:51
cve
cve
CVE-2022-2356
2022-08-08 14:15:08
wpvulndb
wpvulndb
User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
2022-07-12 00:00:00
wpexploit
wpexploit
User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
2022-07-12 00:00:00
prion
prion
Code injection
2022-08-08 14:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.0%
Related for NVD:CVE-2022-2356