CVE Published: 08/08/2022 |
CVE Updated: 03/08/2024 |
CVE Year: 2022 Source: WPScan |
Vendor: Unknown |
Product: Frontend File Manager & Sharing – User Private Files Status : PUBLISHED
CVE-2022-2356 Description
The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.