CVE-2022-25606 WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl, &downloadcategories...

CVE-2022-25606 WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl, &downloadcategories...

CVE-2022-25606: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl, &downloadcategories...

PT-2022-17400

Name of the Vulnerable Software and Affected Versions WP-DownloadManager WordPress plugin versions = 1.68.6 Description Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered in the WP-DownloadManager WordPress plugin. The vulnerable parameters are download path,...

WordPress WP-DownloadManager plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress WP-DownloadManager plugin version 1.68.6 and earlier versions are vulnerable to cross-site scripting. The vulnerability originates f...

CVE-2021-44760

Auth. admin+ Reflected Cross-Site Scripting XSS vulnerability discovered in WP-DownloadManager plugin = 1.68.6 versions...

Cross site scripting

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vvulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl...

CVE-2022-25605 WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vvulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl...

CVE-2022-25605

CVE-2022-25605 affects WordPress WP-DownloadManager plugin versions up to and including 1.68.6. The root cause is improper handling/escaping of download-related settings in the plugin (notably the download_path, download_path_url, and download_page_url), which allows authenticated users to inject...

CVE-2021-44760

WP-DownloadManager (WordPress) plugin versions

CVE-2021-44760 WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

Auth. admin+ Reflected Cross-Site Scripting XSS vulnerability discovered in WP-DownloadManager plugin = 1.68.6 versions...

CVE-2021-44760: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Reflected Cross-Site Scripting XSS vulnerability discovered in WP-DownloadManager plugin = 1.68.6 versions...

PT-2022-17399

Name of the Vulnerable Software and Affected Versions WP-DownloadManager WordPress plugin versions = 1.68.6 Description Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered. The vulnerable parameters are download path, download path url, and download page url...

CVE-2022-25605: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vvulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl...

WP-DownloadManager < 1.68.7 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some of the download settings such as downloadpath, downloadpathurl and downloadpageurl, which could allow high privilege users to perform Cross-Site Scripting attacks...

WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi Patchstack in WordPress WP-DownloadManager plugin versions = 1.68.6. Solution Update the WordPress WP-DownloadManager plugin to the latest available version at least 1.68.7...

CVE-2022-25606

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters path, pathurl, pageurl, categories...

WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi Patchstack in WordPress WP-DownloadManager plugin versions = 1.68.5. Solution Update the WordPress WP-DownloadManager plugin to the latest available version at least 1.68.6...

WP-DownloadManager < 1.68.7 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting...

WordPress WP-DownloadManager plugin <= 1.68.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien in WordPress WP-DownloadManager plugin versions = 1.68.6. Solution Update the WordPress WP-DownloadManager plugin to the latest available version at least 1.68.7...