Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mediamanifesto Component: Mmm Simple File List Clear all filters
TI-2023-04166 CVE-2023-4514 · GHSA-rq8c-6g4c-3q78

Mmm Simple File List <= 2.3 - Contributor+ Stored XSS

Priority LOW 25

The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00416 Published 2023-11-27 No fix listed CWE-79
TI-2023-03973 CVE-2023-4297 · GHSA-732v-mmfh-p7hp

Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing

Priority MEDIUM 53

The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0077 Published 2023-11-27 No fix listed