Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-32539 EUVD-2024-30341GHSA-px5f-27fw-w6jg

WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Published Apr 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP File Download Light allows Stored XSS.This issue affects WP File Download Light: from n/a through 1.3.3.

Affected products

VendorProductAffectedFixed
JoomUnited WP File Download Light ≤ 1.3.3 —

References