Read the docs

Mediamanifesto

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mediamanifesto records in CISA KEV

No Mediamanifesto vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mmm Simple File List 2 records MEDIUM

Records

2 records

TI-2023-03973 CVE-2023-4297 · GHSA-732v-mmfh-p7hp

Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing

Priority MEDIUM 53

The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00637 Published 2023-11-27 No fix listed
TI-2023-04166 CVE-2023-4514 · GHSA-rq8c-6g4c-3q78

Mmm Simple File List <= 2.3 - Contributor+ Stored XSS

Priority LOW 25

The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00416 Published 2023-11-27 No fix listed CWE-79
Open these records in search →