Simple File List vulnerabilities

2 known vulnerabilities in Simple File List from Mitchell Bennis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Simple File List: Improper Neutralization of Input During Web Page Generation

  CVE-2026-57382Jul 13, 2026Mitchell Bennis

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.

• 7.5 High severity

  Simple File List: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-54021Aug 20, 2025Mitchell Bennis

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.14.