WordPress Simple File List plugin < 6.1.13 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by tu3n4nh in WordPress Plugin Simple File List versions 6.1.13...

CVE-2024-10146

The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against admins...

CVE-2024-10146

The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against admins...

CVE-2024-10146 Simple File List < 6.1.13 - Reflected Cross-Site Scripting

The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against admins...

CVE-2024-10146

The CVE concerns the WordPress plugin Simple File List, versions before 6.1.13. The issue is a reflected XSS caused by a generated URL being output in an attribute without proper sanitisation/escaping, which can execute malicious scripts in an admin’s browser. Exploitation requires the victim to ...

PT-2024-16062 · WordPress · Simple File List

Name of the Vulnerable Software and Affected Versions: Simple File List WordPress plugin versions prior to 6.1.13 Description: The issue is related to a Reflected Cross-Site Scripting flaw. It occurs because the plugin does not properly sanitise and escape a generated URL before outputting it bac...

WordPress Simple File List Plugin < 6.1.13 is vulnerable to Cross Site Scripting (XSS)

Software Simple File List Type Plugin Vulnerable versions 6.1.13 Fixed in 6.1.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10146 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0c5c97b90269 Credits tu3n4nh Required...

WordPress plugin Simple File List 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2023-44227

Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a through 6.1.9...

CVE-2023-44227 WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion

Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a through 6.1.9...

CVE-2023-44227 WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion

Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a through 6.1.9...

WordPress Plugin Simple File List 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-13180 · Mitchell Bennis · Simple File List

Name of the Vulnerable Software and Affected Versions: Simple File List versions 6.1.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in Mitchell Bennis Simple File List. Recommendations: For versions 6.1.9 and earlier, update to a version that includes a f...

CVE-2024-2849

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-2849

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-2849 SourceCodester Simple File Manager unrestricted upload

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-2849

The CVE-2024-2849 entry concerns SourceCodester Simple File Manager 1.0. The vulnerability arises from incorrect handling of the photo argument, enabling unrestricted file uploads. This is described as a remote, critical issue with publicly disclosed exploit information. Affected component: Simpl...

Simple File Manager 代码问题漏洞

SourceCodester File Manager is a file manager. A code issue vulnerability exists in Simple File Manager version 1.0, which stems from an incorrect manipulation of photo resulting in unrestricted uploads...

PT-2024-22448 · Sourcecodester · Sourcecodester Simple File Manager

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple File Manager version 1.0 Description: A critical vulnerability was found in the software, affecting unknown code. The manipulation of the photo argument leads to unrestricted upload. The attack can be initiated remotely...

PT-2024-14222 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this issue, the existing authentication...