3 matches found
CVE-2020-27344
The cm-download-manager plugin before 2.8.0 for WordPress allows XSS...
6.1CVSS0.01011EPSS
SaveExploits2References2
CVE-2020-27344
The CVE-2020-27344 entry corresponds to a Cross-Site Scripting (XSS) flaw in the WordPress plugin cm-download-manager, affected until version 2.8.0. The root cause is improper validation/sanitization of client-supplied data, specifically the uploaded filename in Content-Disposition, which can all...
6.1CVSS6.3AI score0.01011EPSS
SaveExploits2References2Affected Software1
20