Download Manager < 3.2.44 - Reflected Cross-Site Scripting
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.3%
exploitation probability
1.3%top 33% of all CVEs
observed exploitation
nono source reports it
The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting
Affected products
Unknown · Download Manager