2 matches found
CVE-2019-15889
The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter...
6.1CVSS6.1AI score0.11375EPSS
SaveExploits6References7
CVE-2019-15889: Improper Neutralization of Input During Web Page Generation
The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter...
6.1CVSS6.3AI score0.11375EPSS
SaveExploits6References2
20