CVE-2022-2367

The CVE-2022-2367 entry concerns the WordPress plugin WSM Downloader (versions ≤ 1.4.0). The vulnerability arises from inadequate validation of the link parameter, allowing bypass of domain restrictions intended to limit which images/files can be downloaded. Affected component/file: WSM Downloade...