Vulnerabilities > CVE-2023-4297 - Unspecified vulnerability in Mediamanifesto MMM Simple File List 2.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |