{"id":"CVE-2017-20097","state":"PUBLISHED","title":"WP-Filebase Download Manager Plugin cross site scriting","description":"A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely.","publishedAt":"2022-06-24T06:45:34.000Z","updatedAt":"2025-04-15T14:13:18.680Z","severity":{"score":3.5,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","source":"VulDB"},"assigner":"VulDB","products":["unspecified WP-Filebase Download Manager Plugin"],"affected":[{"vendor":"unspecified","product":"WP-Filebase Download Manager Plugin","versions":[{"version":"3.4.4","status":"affected"}]}],"references":["http://seclists.org/fulldisclosure/2017/Feb/78","https://vuldb.com/?id.97370"],"weaknesses":["CWE-80"],"ingestedAt":"2026-10-29T19:43:37.076Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/20xxx/CVE-2017-20097.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-20097","state":"PUBLISHED","datePublished":"2022-06-24T06:45:34.000Z","dateUpdated":"2025-04-15T14:13:18.680Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-06-23T00:00:00.000Z"},"containers":{"cna":{"title":"WP-Filebase Download Manager Plugin cross site scriting","descriptions":[{"lang":"en","value":"A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely."}],"affected":[{"vendor":"unspecified","product":"WP-Filebase Download Manager Plugin","versions":[{"version":"3.4.4","status":"affected"}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2017/Feb/78","tags":["x_refsource_MISC"]},{"url":"https://vuldb.com/?id.97370","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-80","description":"CWE-80 Basic Cross Site Scripting","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-06-24T06:45:34.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"credits":[{"lang":"en","value":"Yorick Koster"}],"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2017-20097","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"WP-Filebase Download Manager Plugin cross site scriting"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"WP-Filebase Download Manager Plugin","version":{"version_data":[{"version_value":"3.4.4"}]}}]},"vendor_name":""}]}},"credit":"Yorick Koster","data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"3.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-80 Basic Cross Site Scripting"}]}]},"references":{"reference_data":[{"name":"http://seclists.org/fulldisclosure/2017/Feb/78","refsource":"MISC","url":"http://seclists.org/fulldisclosure/2017/Feb/78"},{"name":"https://vuldb.com/?id.97370","refsource":"MISC","url":"https://vuldb.com/?id.97370"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2017/Feb/78","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://vuldb.com/?id.97370","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T21:45:25.407Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T17:08:04.652166Z","id":"CVE-2017-20097","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T14:13:18.680Z"}}]}}}