Approved changes feed: RSS · Atom

cpe:2.3:a:filemanagerpro:file_manager:2.9:*:*:*:*:wordpress:*:*

part: a version: 2.9 update: *

VendorFilemanagerpro (bb02e783-0911-54b7-968e-635005d3120a)
ProductFile Manager (1e151410-48c9-590e-aae5-aae36b786a62)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16363 vulnerable 2026-06-08 05:11:04.754717 Details available
The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php and there is an echo of lang in lib\wpfilemanager.php.
Published: 2018-09-07T22:00:00.000Z
Updated: 2024-08-05T10:24:32.343Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.