CVE-2022-3062: Simplefilelist Simple-File-List

Medium severity, CVSS 6.1. EPSS: 44.1% chance of exploitation in the next 30 days.

The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

Affected products

• Simplefilelist Simple-File-List: before 4.4.12 (fixed in 4.4.12)

Published 2022-09-26. Last modified 2026-06-17.