Vulnerabilities and Security Researches

Download Manager, CVE-2017-18032

CVE, Research URL: CVE-2017-18032
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Jan 16, 2018
Research Description: The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php.
Affected versions: Min -, max 2.9.52.
Status: vulnerable