Vulnerabilities and Security Researches

Download Manager, CVE-2022-2168

CVE, Research URL: CVE-2022-2168
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Jul 17, 2022
Research Description: The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting
Affected versions: Min -, max 3.2.44.
Status: vulnerable