Description
Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter.
References
- http://plugins.trac.wordpress.org/changeset/723187/download-monitor
- wp-downloadmonitor-cve20133262-admin-xss(85921) vdb-entry
- 53116 third-party-advisory
- 61407 vdb-entry