Download Manager, dc77633354921d8fde420d9502ad22bee58a2399
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jul 16, 2015
- Research Description
- Download Manager [download-manager] < 2.7.95 WordPress Download Manager Free 2.7.94 & Pro 4 - Authenticated Stored XSS Download Manager Free and Pro is prone to an authenticated stored XSS that allows an attacker to create new download package and upload files, called <svg onload=alert(0)>.jpg. This vulnerability works, when user try to edit this download package. Upgrade to the latest version.
- Affected versions
-
max 2.7.95.
- Status
-
vulnerable