← Back to browse · API

CVE-2022-3062

Severity
MEDIUM
CVSS
6.1
EPSS
0.44095
Risk score
39.83
CISA KEV
No
PoC
No
Published
2022-09-26
Modified
2025-05-22
First seen
2026-08-07
Aliases
EUVD-2022-42494, GHSA-87X2-4XVF-5X6Q
Products
Mitchell Bennis:Simple File List 4.4.12 <4.4.12
Sources
euvd EUVD-2022-42494

Description

The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

References