Unscored CVE-2020-5650 EUVD-2020-26811GHSA-2gf7-wf94-4pqj

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via u…

Published Oct 21, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Tips and Tricks HQ Product: Simple Download Monitor

Description

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Tips and Tricks HQ	Simple Download Monitor	3.8.8 and earlier	—

References

https://wordpress.org/plugins/simple-download-monitor/
https://jvn.jp/en/jp/JVN31425618/index.html