CVE-2023-39924

概要

参考情報

• patchstack.com/database/vulnerability/simple-file-list/wordpress-simple-file-list-plugin-6-1-9-cross-site-scripting-xss-vulnerability · Third Party Advisory

simple file list のその他の脆弱性

• CVE-2020-36847緊急 9.8The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename func…
• CVE-2024-10146中 5.4The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, …
• CVE-2023-1025中 4.8The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege user…