SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-57382

HIGH · CVSS 7.1 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The vulnerability in Simple File List allows for reflected cross-site scripting (XSS) attacks due to improper input neutralization during web page generation. This can enable attackers to execute arbitrary scripts in the context of a user's browser, potentially leading to data theft or session hijacking. Organizations using versions up to 6.3.8 should prioritize remediation to mitigate the risk of exploitation.

CVE
CVE-2026-57382
Severity
HIGH
CVSS
7.1
EPSS
0.18%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.