NetSight
high8.8

CVE-2022-2356

The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead…

Impact

The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.

Affected products

VendorProductAffected versions
MediajediUser Private Files
before 1.1.3

Weakness classification

References