Vulnerabilities and Security Researches

Z-Downloads, CVE-2024-8703

CVE, Research URL: CVE-2024-8703
Home page URL: Security reports for Z-Downloads
Application: Z-Downloads
Published on: May 16, 2025
Research Description: The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs.
Affected versions: Min -, max 1.11.6.
Status: vulnerable