Description
The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php.
Unscored
CVE-2017-18032
EUVD-2017-9172GHSA-gfcw-2qf2-jg76
The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-a…
Published Jan 16, 2018 · Updated Aug 5, 2024 · Assigned by mitre