Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-24697
HistoryNov 08, 2021 - 6:15 p.m.

Cross site scripting

2021-11-0818:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

41.3%

The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date POST parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

CPENameOperatorVersion
simple_download_monitorlt3.9.5

0.001 Low

EPSS

Percentile

41.3%