The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.

Published Aug 13, 2019 · Updated Aug 6, 2024 · Assigned by mitre