Download Manager, f3f46b154001f285c6e191f079b8effcaa304bac

CVE, Research URL: f3f46b154001f285c6e191f079b8effcaa304bac
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Dec 07, 2013
Research Description: Download Manager [download-manager] < 2.5.9 Download Manager <= 2.5.8 - Cross-Site Scripting The Download Manager plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 2.5.8 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 2.5.9.
Status: vulnerable