Download Manager, 2d592bc0-5ab8-43ba-927e-32f8323630bf

CVE, Research URL: 2d592bc0-5ab8-43ba-927e-32f8323630bf
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: -
Research Description: Download Manager [download-manager] < 2.7.95 Download Manager <= 2.7.94 - Authenticated Stored XSS The stored XSS vulnerability allows any authenticated user to inject malicious code via the name of the uploaded file: Example: <svg onload=alert(0)>.jpg The vulnerability exists because the file name is not properly sanitized and this can lead to malicious code injection that will be executed on the target’s browser.
Affected versions: max 2.7.95.
Status: vulnerable