WP-DownloadManager, CVE-2022-25606

CVE, Research URL: CVE-2022-25606
Home page URL: Security reports for WP-DownloadManager
Application: WP-DownloadManager
Published on: Mar 26, 2022
Research Description: Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vulnerable parameters &download_path, &download_path_url, &download_page_url, &download_categories.
Affected versions: max 1.68.7.
Status: vulnerable