Download Manager, dc77633354921d8fde420d9502ad22bee58a2399

CVE, Research URL: dc77633354921d8fde420d9502ad22bee58a2399
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Jul 16, 2015
Research Description: Download Manager [download-manager] < 2.7.95 WordPress Download Manager Free 2.7.94 & Pro 4 - Authenticated Stored XSS Download Manager Free and Pro is prone to an authenticated stored XSS that allows an attacker to create new download package and upload files, called <svg onload=alert(0)>.jpg. This vulnerability works, when user try to edit this download package. Upgrade to the latest version.
Affected versions: max 2.7.95.
Status: vulnerable