CVEvulnerability

CVE-2022-3126

4.3 MEDIUM Published 2022-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-352

Description

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

Affected configurations

• najeebmedia frontend file manager plugin (< 21.4)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References