Lucene search
PRIOn knowledge basePRION:CVE-2019-15889HistorySep 03, 2019 - 6:15 p.m.
Design/Logic Flaw
2019-09-0318:15:00
PRIOn knowledge base
www.prio-n.com
3
0.033 Low
EPSS
Percentile
91.3%
The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_download_manager | lt | 2.9.94 |
References
packetstormsecurity.com/files/154356/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html
packetstormsecurity.com/files/152511/WordPress-Download-Manager-2.9.92-Cross-Site-Scripting.html
packetstormsecurity.com/files/152552/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html
plugins.trac.wordpress.org/changeset/2070388/download-manager
wordpress.org/plugins/download-manager/
wpvulndb.com/vulnerabilities/9257
www.cybersecurity-help.cz/vdb/SB2019041819
Related
zdt
zdt
wpvulndb
wpvulndb
Download Manager <= 2.9.93 - Authenticated Cross-Site Scripting (XSS)
2019-04-17 00:00:00
exploitpack
exploitpack
WordPress Plugin Download Manager 2.9.93 - Cross-Site Scripting
2019-09-04 00:00:00
nuclei
nuclei
WordPress Download Manager <2.9.94 - Cross-Site Scripting
2021-07-11 01:20:03
nvd
nvd
CVE-2019-15889
2019-09-03 18:15:12
cvelist
cvelist
CVE-2019-15889
2019-09-03 17:07:01
packetstorm
packetstorm
WordPress Download Manager 2.9.93 Cross Site Scripting
2019-09-04 00:00:00
cve
cve
CVE-2019-15889
2019-09-03 18:15:12
openvas
openvas
WordPress Download Manager Plugin < 2.9.94 XSS Vulnerability
2019-09-12 00:00:00
wpexploit
wpexploit
Download Manager <= 2.9.93 - Authenticated Cross-Site Scripting (XSS)
2019-04-17 00:00:00
exploitdb
exploitdb
WordPress Plugin Download Manager 2.9.93 - Cross-Site Scripting
2019-09-04 00:00:00