CVE-2022-34658

CVE-2022-34658 concerns the WordPress Download Manager plugin (versions ≤ 3.2.48). The vulnerability is a Stored Cross-Site Scripting (XSS) issue that can be triggered by users with at least a Contributor role (i.e., authenticated users). The root cause is inadequate sanitization/escaping of inpu...

PT-2022-22275

Name of the Vulnerable Software and Affected Versions W3 Eden Download Manager plugin version 3.2.48 and earlier Description The issue concerns multiple authenticated persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities allow attackers to inject malicious scripts into...