CVE-2022-2356 in Frontend File Manager & Sharing Plugin

Riassunto

di MITRE • 08/08/2022

The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 08/07/2022
• Divulgazione: 08/08/2022
• Moderazione: accettato
• Voce: VDB-205846
• CPE: pronto
• CWE: CWE-434 (confermato)
• CVSS: 8.8 (NVD)
• EPSS: 0.00795
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2356
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2356
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2356/