CVE-2022-3062

MEDIUM 6.1CVE-2022-3062 · Published 26/09/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
simple-file-list simplefilelist	`< 4.4.12`	`4.4.12`

Description

The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/2e829bbe-1843-496d-a852-4150fa6d1f7a · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free