CVE-2022-3208: falha em Simple File List
Simple File List < 4.4.13 - Page Creation via CSRF
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.4%
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.
Produtos afetados
Unknown · Simple File ListCVEs relacionadas — Simple File List
No mesmo produto, das mais perigosas para as menos.
CVE-2022-3062MEDIUMSimple File List < 4.4.12 - Reflected Cross-Site ScriptingEPSS 44.1%CVE-2026-16616HIGHSimple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path TraversalEPSS 0.7%CVE-2024-10146MEDIUMSimple File List < 6.1.13 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-3207—Simple File List < 4.4.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2026-16617HIGHSimple File List <= 6.3.11 - Unauthenticated Stored XSS via File DescriptionEPSS 0.5%CVE-2023-1025MEDIUMSimple File List < 6.0.10 - Admin+ Stored XSSEPSS 0.4%