Description
Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262.
References
- http://plugins.trac.wordpress.org/changeset/723187/download-monitor
- wp-downloadmonitor-cve20133262-admin-xss(85921) vdb-entry
- 53116 third-party-advisory
- 61407 vdb-entry