Unrated severityNVD Advisory· Published Nov 14, 2024· Updated Nov 14, 2024

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

CVE-2024-10146

Description

The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against admins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Simple File Listcpe-rescue
Package: https://wordpress.org/plugins/simple-file-list
Simplefilelist/Simple File Listllm-fuzzy
Range: <6.1.13

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/9ee74a0f-83ff-4c15-a114-f8f6baab8bf5/mitreexploitvdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000