2 matches found
CVE-2022-25606: Improper Neutralization of Input During Web Page Generation
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl, &downloadcategories...
5.4CVSS6AI score0.00566EPSS
SaveExploits0References3
CVE-2022-25605: Improper Neutralization of Input During Web Page Generation
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vvulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl...
5.4CVSS6AI score0.00563EPSS
SaveExploits0References3
20