CVEvulnerability

CVE-2022-3124

5.3 MEDIUM Published 2022-10-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-862

Description

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server

Affected configurations

• najeebmedia frontend file manager (< 21.3)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References