Unscored CVE-2017-2216 EUVD-2017-11399GHSA-5rqh-q5x2-9h3v

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web sc…

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: W3 Eden Product: WordPress Download Manager Category: Web / CMS

Description

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
W3 Eden	WordPress Download Manager	prior to version 2.9.50	—

References

https://plugins.trac.wordpress.org/changeset/1650075/
JVN#79738260 third-party-advisory
https://wordpress.org/plugins/download-manager/#developers