WordPress plugin Download Monitor 跨站脚本漏洞

WordPress is a set of blogging platform developed using PHP language. File Upload is one of the file upload plugins used in it. WordPress plugin is an application plugin. The vulnerability is caused by the vulnerable parameters &posttitle, &downloadablefileversion0. An attacker could exploit this...

CVE-2021-23174: Improper Neutralization of Input During Web Page Generation

Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6 Vulnerable parameters: &posttitle, &downloadablefileversion0...