Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-2367

WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass

Description

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WSM Downloader

  • 1.4.0 to ≤ 1.4.0affected

References