Download Manager, 394007c5-7923-46fe-bb4c-2377d66ff900
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Download Manager [download-manager] < 3.2.53 Download Manager < 3.2.53 - Unauthenticated Reflected Cross-Site Scripting The plugin does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute of the modal login page (only available when users are not logged in), which could lead to Reflected Cross-Site Scripting in old web browsers.
- Affected versions
-
max 3.2.53.
- Status
-
vulnerable