CVE-2023-4297: medium-severity vulnerability in Mmm Simple File List
Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.8%
The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Unknown · Mmm Simple File ListRelated CVEs — Mmm Simple File List
In the same product, most dangerous first.