Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-8444

Download Manager < 3.3.00 - Contributor+ Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Download Manager

Default version status: unaffected

  • 0 to < 3.3.00affected

References