Download Manager, 95deb79c-bf19-4ab5-aac6-702a13323356
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Download Manager [download-manager] < 3.2.44 Download Manager < 3.2.44 - Unauthenticated Reflected Cross-Site Scripting The plugin does not escape a generated URL before outputting it back in an attribute of the login page made by the plugin, leading to Reflected Cross-Site Scripting, which is only exploitable against unauthenticated users
- Affected versions
-
max 3.2.44.
- Status
-
vulnerable