PT-2018-16805

Name of the Vulnerable Software and Affected Versions Simple Download Monitor plugin versions prior to 3.5.4 Description The issue allows for XSS via the sdm upload parameter in an edit action to the "wp-admin/post.php" endpoint. This affects the WordPress plugin, potentially allowing malicious...

PT-2018-16804

Name of the Vulnerable Software and Affected Versions Simple Download Monitor plugin versions prior to 3.5.4 Description The issue allows for XSS via the sdm upload thumbnail parameter in an edit action to the "/wp-admin/post.php" endpoint. This affects the plugin's functionality related to file...