CVE-2020-24146

Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...

CVE-2020-24145

Cross Site Scripting XSS vulnerability in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action...

Cross site scripting

Cross Site Scripting XSS vulnerability in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action...

CVE-2020-24145

Cross Site Scripting XSS vulnerability in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action...

CVE-2020-24145: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action...

PT-2021-11016

Name of the Vulnerable Software and Affected Versions: CM Download Manager plugin version 2.7.0 Description: A Cross Site Scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action. Recommendations: For CM Download Manager plugin versi...

WordPress 路径遍历漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in WordPress Plugin CM Download Manager, which can be...

PT-2021-11017

Name of the Vulnerable Software and Affected Versions: CM Download Manager plugin version 2.7.0 Description: The issue allows authorized users to delete arbitrary files and possibly cause a denial of service. This is achieved via the fileName parameter in a deletescreenshot action. Recommendation...

CVE-2020-24146: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...