Download Manager, 08495341a9e6640a1aacf0b99715dcfd0953bd70

CVE, Research URL: 08495341a9e6640a1aacf0b99715dcfd0953bd70
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Aug 01, 2014
Research Description: Download Manager [download-manager] < 2.2.3 Download Manager <= 2.2.2 - Cross-Site Scripting The Download Manager plugin for WordPress is vulnerable to Cross-Site Scripting via the 'cid' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 2.2.3.
Status: vulnerable