Download Monitor, f5860b327086138ba7c86b4d57c3f4d6b08a8b4e

CVE, Research URL: f5860b327086138ba7c86b4d57c3f4d6b08a8b4e
Home page URL: Security reports for Download Monitor
Application: Download Monitor
Published on: Apr 20, 2015
Research Description: Download Monitor [download-monitor] <= 1.6.4 Download Monitor <= 1.6.4 - Reflected Cross-Site Scripting The Download Monitor plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on remove_query_arg and add_query_arg. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 1.6.4.
Status: vulnerable